{
  "statistics": {
    "processing": [
      {
        "name": "CAPE",
        "time": 8.395
      },
      {
        "name": "AnalysisInfo",
        "time": 0.074
      },
      {
        "name": "BehaviorAnalysis",
        "time": 0.772
      },
      {
        "name": "Debug",
        "time": 0.001
      },
      {
        "name": "NetworkAnalysis",
        "time": 10.272
      },
      {
        "name": "Suricata",
        "time": 15.444
      },
      {
        "name": "UrlAnalysis",
        "time": 0.0
      },
      {
        "name": "script_log_processing",
        "time": 0.0
      },
      {
        "name": "ProcessMemory",
        "time": 0.0
      }
    ],
    "signatures": [
      {
        "name": "packer_themida",
        "time": 0.0
      },
      {
        "name": "stealth_network",
        "time": 0.0
      },
      {
        "name": "disable_driver_via_blocklist",
        "time": 0.0
      },
      {
        "name": "disable_driver_via_hvcidisallowedimages",
        "time": 0.0
      },
      {
        "name": "disable_hypervisor_protected_code_integrity",
        "time": 0.0
      },
      {
        "name": "pendingfilerenameoperations_Operations",
        "time": 0.0
      },
      {
        "name": "anomalous_deletefile",
        "time": 0.0
      },
      {
        "name": "antiav_360_libs",
        "time": 0.0
      },
      {
        "name": "antiav_ahnlab_libs",
        "time": 0.0
      },
      {
        "name": "antiav_avast_libs",
        "time": 0.0
      },
      {
        "name": "antiav_bitdefender_libs",
        "time": 0.0
      },
      {
        "name": "antiav_bullguard_libs",
        "time": 0.0
      },
      {
        "name": "antiav_emsisoft_libs",
        "time": 0.0
      },
      {
        "name": "antiav_qurb_libs",
        "time": 0.0
      },
      {
        "name": "antiav_servicestop",
        "time": 0.0
      },
      {
        "name": "antiav_apioverride_libs",
        "time": 0.0
      },
      {
        "name": "antidebug_guardpages",
        "time": 0.0
      },
      {
        "name": "antidebug_ntcreatethreadex",
        "time": 0.0
      },
      {
        "name": "antiav_nthookengine_libs",
        "time": 0.0
      },
      {
        "name": "antidebug_outputdebugstring",
        "time": 0.0
      },
      {
        "name": "antidebug_setunhandledexceptionfilter",
        "time": 0.0
      },
      {
        "name": "antidebug_windows",
        "time": 0.0
      },
      {
        "name": "antisandbox_cuckoo",
        "time": 0.0
      },
      {
        "name": "antisandbox_cuckoocrash",
        "time": 0.0
      },
      {
        "name": "antisandbox_foregroundwindows",
        "time": 0.0
      },
      {
        "name": "mouse_movement_detect",
        "time": 0.0
      },
      {
        "name": "antisandbox_sboxie_libs",
        "time": 0.0
      },
      {
        "name": "antisandbox_script_timer",
        "time": 0.0
      },
      {
        "name": "antisandbox_sleep",
        "time": 0.0
      },
      {
        "name": "antisandbox_sunbelt_libs",
        "time": 0.0
      },
      {
        "name": "antisandbox_suspend",
        "time": 0.0
      },
      {
        "name": "antisandbox_unhook",
        "time": 0.0
      },
      {
        "name": "antivm_directory_objects",
        "time": 0.0
      },
      {
        "name": "antivm_display",
        "time": 0.0
      },
      {
        "name": "antivm_generic_disk",
        "time": 0.0
      },
      {
        "name": "antivm_generic_scsi",
        "time": 0.0
      },
      {
        "name": "antivm_generic_services",
        "time": 0.0
      },
      {
        "name": "antivm_generic_system",
        "time": 0.0
      },
      {
        "name": "antivm_checks_available_memory",
        "time": 0.0
      },
      {
        "name": "detect_virtualization_via_recent_files",
        "time": 0.0
      },
      {
        "name": "antivm_vbox_libs",
        "time": 0.0
      },
      {
        "name": "antivm_vbox_window",
        "time": 0.0
      },
      {
        "name": "antivm_vmware_events",
        "time": 0.0
      },
      {
        "name": "antivm_vmware_libs",
        "time": 0.0
      },
      {
        "name": "antivm_wmi",
        "time": 0.0
      },
      {
        "name": "api_spamming",
        "time": 0.0
      },
      {
        "name": "api_uuidfromstringa",
        "time": 0.0
      },
      {
        "name": "banker_prinimalka",
        "time": 0.0
      },
      {
        "name": "bcdedit_command",
        "time": 0.0
      },
      {
        "name": "bootkit",
        "time": 0.0
      },
      {
        "name": "direct_hdd_access",
        "time": 0.0
      },
      {
        "name": "physical_drive_access",
        "time": 0.0
      },
      {
        "name": "potential_overwrite_mbr",
        "time": 0.0
      },
      {
        "name": "read_file_raw_disk_access",
        "time": 0.0
      },
      {
        "name": "suspicious_iocontrol_codes",
        "time": 0.0
      },
      {
        "name": "browser_needed",
        "time": 0.0
      },
      {
        "name": "firefox_disables_process_tab",
        "time": 0.0
      },
      {
        "name": "regsvr32_squiblydoo_dll_load",
        "time": 0.0
      },
      {
        "name": "uac_bypass_cmstp",
        "time": 0.0
      },
      {
        "name": "uac_bypass_eventvwr",
        "time": 0.0
      },
      {
        "name": "uac_bypass_windows_Backup",
        "time": 0.0
      },
      {
        "name": "dotnet_code_compile",
        "time": 0.0
      },
      {
        "name": "queries_computer_name",
        "time": 0.0
      },
      {
        "name": "queries_user_name",
        "time": 0.0
      },
      {
        "name": "creates_largekey",
        "time": 0.0
      },
      {
        "name": "creates_nullvalue",
        "time": 0.0
      },
      {
        "name": "access_windows_passwords_vault",
        "time": 0.0
      },
      {
        "name": "dump_lsa_via_windows_error_reporting",
        "time": 0.0
      },
      {
        "name": "lsass_credential_dumping",
        "time": 0.0
      },
      {
        "name": "critical_process",
        "time": 0.0
      },
      {
        "name": "cryptopool_domains",
        "time": 0.0
      },
      {
        "name": "dead_connect",
        "time": 0.0
      },
      {
        "name": "dead_link",
        "time": 0.0
      },
      {
        "name": "decoy_document",
        "time": 0.0
      },
      {
        "name": "decoy_image",
        "time": 0.0
      },
      {
        "name": "deletes_consolehost_history",
        "time": 0.0
      },
      {
        "name": "deletes_self",
        "time": 0.0
      },
      {
        "name": "dep_bypass",
        "time": 0.0
      },
      {
        "name": "dep_disable",
        "time": 0.0
      },
      {
        "name": "disables_spdy",
        "time": 0.0
      },
      {
        "name": "disables_wfp",
        "time": 0.0
      },
      {
        "name": "add_windows_defender_exclusions",
        "time": 0.0
      },
      {
        "name": "mountpoints_volume_discovery",
        "time": 0.0
      },
      {
        "name": "dll_load_uncommon_file_types",
        "time": 0.0
      },
      {
        "name": "document_script_exe_drop",
        "time": 0.0
      },
      {
        "name": "guloader_apis",
        "time": 0.0
      },
      {
        "name": "driver_load",
        "time": 0.0
      },
      {
        "name": "dynamic_function_loading",
        "time": 0.0
      },
      {
        "name": "encrypted_ioc",
        "time": 0.0
      },
      {
        "name": "exec_crash",
        "time": 0.0
      },
      {
        "name": "process_creation_suspicious_location",
        "time": 0.0
      },
      {
        "name": "exploit_getbasekerneladdress",
        "time": 0.0
      },
      {
        "name": "exploit_gethaldispatchtable",
        "time": 0.0
      },
      {
        "name": "exploit_heapspray",
        "time": 0.0
      },
      {
        "name": "koadic_apis",
        "time": 0.0
      },
      {
        "name": "koadic_network_activity",
        "time": 0.0
      },
      {
        "name": "downloads_from_filehosting",
        "time": 0.0
      },
      {
        "name": "generic_phish",
        "time": 0.0
      },
      {
        "name": "http_request",
        "time": 0.0
      },
      {
        "name": "infostealer_browser",
        "time": 0.0
      },
      {
        "name": "infostealer_browser_password",
        "time": 0.0
      },
      {
        "name": "infostealer_cookies",
        "time": 0.0
      },
      {
        "name": "cryptbot_network",
        "time": 0.0
      },
      {
        "name": "masslogger_artifacts",
        "time": 0.0
      },
      {
        "name": "masslogger_version",
        "time": 0.0
      },
      {
        "name": "purplewave_network_activity",
        "time": 0.0
      },
      {
        "name": "quilclipper_behavior",
        "time": 0.0
      },
      {
        "name": "raccoon_behavior",
        "time": 0.0
      },
      {
        "name": "captures_screenshot",
        "time": 0.0
      },
      {
        "name": "vidar_behavior",
        "time": 0.0
      },
      {
        "name": "injection_createremotethread",
        "time": 0.0
      },
      {
        "name": "creates_suspended_process",
        "time": 0.0
      },
      {
        "name": "injection_explorer",
        "time": 0.0
      },
      {
        "name": "injection_network_traffic",
        "time": 0.0
      },
      {
        "name": "injection_runpe",
        "time": 0.0
      },
      {
        "name": "injection_rwx",
        "time": 0.0
      },
      {
        "name": "injection_themeinitapihook",
        "time": 0.0
      },
      {
        "name": "resumethread_remote_process",
        "time": 0.0
      },
      {
        "name": "injection_write_exe_process",
        "time": 0.0
      },
      {
        "name": "injection_write_process",
        "time": 0.0
      },
      {
        "name": "internet_dropper",
        "time": 0.0
      },
      {
        "name": "escalate_privilege_via_named_pipe",
        "time": 0.0
      },
      {
        "name": "ipc_namedpipe",
        "time": 0.0
      },
      {
        "name": "js_phish",
        "time": 0.0
      },
      {
        "name": "js_suspicious_redirect",
        "time": 0.0
      },
      {
        "name": "loader_alien",
        "time": 0.0
      },
      {
        "name": "execute_binary_via_internet_explorer_exporter",
        "time": 0.0
      },
      {
        "name": "execute_binary_via_run_exe_helper_utility",
        "time": 0.0
      },
      {
        "name": "execute_ps_via_syncappvpublishingserver",
        "time": 0.0
      },
      {
        "name": "malicious_dynamic_function_loading",
        "time": 0.0
      },
      {
        "name": "encrypt_pcinfo",
        "time": 0.0
      },
      {
        "name": "encrypt_data_agenttesla_http",
        "time": 0.0
      },
      {
        "name": "encrypt_data_agentteslat2_http",
        "time": 0.0
      },
      {
        "name": "encrypt_data_nanocore",
        "time": 0.0
      },
      {
        "name": "reads_memory_remote_process",
        "time": 0.0
      },
      {
        "name": "mimics_filetime",
        "time": 0.0
      },
      {
        "name": "amsi_bypass_via_com_registry",
        "time": 0.0
      },
      {
        "name": "access_auto_logons_via_registry",
        "time": 0.0
      },
      {
        "name": "access_boot_key_via_registry",
        "time": 0.0
      },
      {
        "name": "create_suspicious_lnk_files",
        "time": 0.0
      },
      {
        "name": "credential_access_via_windows_credential_history",
        "time": 0.0
      },
      {
        "name": "dll_hijacking_via_microsoft_exchange",
        "time": 0.0
      },
      {
        "name": "dll_hijacking_via_waas_medic_svc_com_typelib",
        "time": 0.0
      },
      {
        "name": "execute_file_downloaded_via_openssh",
        "time": 0.0
      },
      {
        "name": "execute_safe_mode_from_suspicious_process",
        "time": 0.0
      },
      {
        "name": "execute_scripts_via_microsoft_management_console",
        "time": 0.0
      },
      {
        "name": "execute_suspicious_processes_via_windows_mssql_service",
        "time": 0.0
      },
      {
        "name": "execution_from_self_extracting_archive",
        "time": 0.0
      },
      {
        "name": "ip_address_discovery_via_trusted_program",
        "time": 0.0
      },
      {
        "name": "load_dll_via_control_panel",
        "time": 0.0
      },
      {
        "name": "network_connection_via_suspicious_process",
        "time": 0.0
      },
      {
        "name": "potential_location_discovery_via_unusual_process",
        "time": 0.0
      },
      {
        "name": "store_executable_registry",
        "time": 0.0
      },
      {
        "name": "Suspicious_Execution_Via_MicrosoftExchangeTransportAgent",
        "time": 0.0
      },
      {
        "name": "suspicious_java_execution_via_win_scripts",
        "time": 0.0
      },
      {
        "name": "Suspicious_Scheduled_Task_Creation_Via_Masqueraded_XML_File",
        "time": 0.0
      },
      {
        "name": "uses_restart_manager_for_suspicious_activities",
        "time": 0.0
      },
      {
        "name": "modify_desktop_wallpaper",
        "time": 0.0
      },
      {
        "name": "modify_zoneid_ads",
        "time": 0.0
      },
      {
        "name": "move_file_on_reboot",
        "time": 0.0
      },
      {
        "name": "multiple_useragents",
        "time": 0.0
      },
      {
        "name": "network_anomaly",
        "time": 0.0
      },
      {
        "name": "network_bind",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_archive",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_free_webhosting",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_generic",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_interactsh",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_opensource",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_pastesite",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_payload",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_serviceinterface",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_socialmedia",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_telegram",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_tempstorage",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_temp_urldns",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_urlshortener",
        "time": 0.0
      },
      {
        "name": "network_cnc_https_useragent",
        "time": 0.0
      },
      {
        "name": "network_cnc_smtps_exfil",
        "time": 0.0
      },
      {
        "name": "network_cnc_smtps_generic",
        "time": 0.0
      },
      {
        "name": "network_dns_idn",
        "time": 0.0
      },
      {
        "name": "network_dns_suspicious_querytype",
        "time": 0.0
      },
      {
        "name": "network_dns_tunneling_request",
        "time": 0.0
      },
      {
        "name": "network_document_http",
        "time": 0.0
      },
      {
        "name": "explorer_http",
        "time": 0.0
      },
      {
        "name": "network_fake_useragent",
        "time": 0.0
      },
      {
        "name": "legitimate_domain_abuse",
        "time": 0.0
      },
      {
        "name": "suspicious_communication_trusted_site",
        "time": 0.0
      },
      {
        "name": "network_document_file",
        "time": 0.0
      },
      {
        "name": "network_tor",
        "time": 0.0
      },
      {
        "name": "office_com_load",
        "time": 0.0
      },
      {
        "name": "office_dotnet_load",
        "time": 0.0
      },
      {
        "name": "office_mshtml_load",
        "time": 0.0
      },
      {
        "name": "office_vb_load",
        "time": 0.0
      },
      {
        "name": "office_wmi_load",
        "time": 0.0
      },
      {
        "name": "office_cve2017_11882",
        "time": 0.0
      },
      {
        "name": "office_cve2017_11882_network",
        "time": 0.0
      },
      {
        "name": "office_cve_2021_40444",
        "time": 0.0
      },
      {
        "name": "office_cve_2021_40444_m2",
        "time": 0.0
      },
      {
        "name": "office_flash_load",
        "time": 0.0
      },
      {
        "name": "office_postscript",
        "time": 0.0
      },
      {
        "name": "office_suspicious_processes",
        "time": 0.0
      },
      {
        "name": "office_write_exe",
        "time": 0.0
      },
      {
        "name": "persistence_via_autodial_dll_registry",
        "time": 0.0
      },
      {
        "name": "persistence_autorun",
        "time": 0.0
      },
      {
        "name": "persistence_autorun_tasks",
        "time": 0.0
      },
      {
        "name": "persistence_bootexecute",
        "time": 0.0
      },
      {
        "name": "persistence_registry_script",
        "time": 0.0
      },
      {
        "name": "powershell_network_connection",
        "time": 0.0
      },
      {
        "name": "powershell_download",
        "time": 0.0
      },
      {
        "name": "powershell_request",
        "time": 0.0
      },
      {
        "name": "createtoolhelp32snapshot_module_enumeration",
        "time": 0.0
      },
      {
        "name": "enumerates_running_processes",
        "time": 0.0
      },
      {
        "name": "process_interest",
        "time": 0.0
      },
      {
        "name": "process_needed",
        "time": 0.0
      },
      {
        "name": "mass_data_encryption",
        "time": 0.0
      },
      {
        "name": "ransomware_file_modifications",
        "time": 0.0
      },
      {
        "name": "ransomware_message",
        "time": 0.0
      },
      {
        "name": "nemty_network_activity",
        "time": 0.0
      },
      {
        "name": "nemty_note",
        "time": 0.0
      },
      {
        "name": "sodinokibi_behavior",
        "time": 0.0
      },
      {
        "name": "stop_ransomware_registry",
        "time": 0.0
      },
      {
        "name": "blackrat_apis",
        "time": 0.0
      },
      {
        "name": "blackrat_network_activity",
        "time": 0.0
      },
      {
        "name": "blackrat_registry_keys",
        "time": 0.0
      },
      {
        "name": "dcrat_behavior",
        "time": 0.0
      },
      {
        "name": "karagany_system_event_objects",
        "time": 0.0
      },
      {
        "name": "rat_luminosity",
        "time": 0.0
      },
      {
        "name": "rat_nanocore",
        "time": 0.0
      },
      {
        "name": "netwire_behavior",
        "time": 0.0
      },
      {
        "name": "obliquerat_network_activity",
        "time": 0.0
      },
      {
        "name": "orcusrat_behavior",
        "time": 0.0
      },
      {
        "name": "trochilusrat_apis",
        "time": 0.0
      },
      {
        "name": "reads_self",
        "time": 0.0
      },
      {
        "name": "recon_beacon",
        "time": 0.0
      },
      {
        "name": "recon_programs",
        "time": 0.0
      },
      {
        "name": "recon_systeminfo",
        "time": 0.0
      },
      {
        "name": "accesses_recyclebin",
        "time": 0.0
      },
      {
        "name": "remcos_shell_code_dynamic_wrapper_x",
        "time": 0.0
      },
      {
        "name": "removes_zoneid_ads",
        "time": 0.0
      },
      {
        "name": "script_created_process",
        "time": 0.0
      },
      {
        "name": "script_network_activity",
        "time": 0.0
      },
      {
        "name": "suspicious_js_script",
        "time": 0.0
      },
      {
        "name": "javascript_timer",
        "time": 0.0
      },
      {
        "name": "secure_login_phishing",
        "time": 0.0
      },
      {
        "name": "securityxploded_modules",
        "time": 0.0
      },
      {
        "name": "get_clipboard_data",
        "time": 0.0
      },
      {
        "name": "sets_autoconfig_url",
        "time": 0.0
      },
      {
        "name": "spoofs_procname",
        "time": 0.0
      },
      {
        "name": "stack_pivot",
        "time": 0.0
      },
      {
        "name": "stack_pivot_file_created",
        "time": 0.0
      },
      {
        "name": "stack_pivot_process_create",
        "time": 0.0
      },
      {
        "name": "set_clipboard_data",
        "time": 0.0
      },
      {
        "name": "stealth_childproc",
        "time": 0.0
      },
      {
        "name": "stealth_file",
        "time": 0.0
      },
      {
        "name": "stealth_timeout",
        "time": 0.0
      },
      {
        "name": "stealth_window",
        "time": 0.0
      },
      {
        "name": "queries_keyboard_layout",
        "time": 0.0
      },
      {
        "name": "queries_locale_api",
        "time": 0.0
      },
      {
        "name": "terminates_remote_process",
        "time": 0.0
      },
      {
        "name": "trickbot_task_delete",
        "time": 0.0
      },
      {
        "name": "uiautomationcore_load",
        "time": 0.0
      },
      {
        "name": "user_enum",
        "time": 0.0
      },
      {
        "name": "mmc_dll_script_load",
        "time": 0.0
      },
      {
        "name": "mmc_dotnet_load",
        "time": 0.0
      },
      {
        "name": "virus",
        "time": 0.0
      },
      {
        "name": "neshta_files",
        "time": 0.0
      },
      {
        "name": "neshta_regkeys",
        "time": 0.0
      },
      {
        "name": "webmail_phish",
        "time": 0.0
      },
      {
        "name": "persists_dev_util",
        "time": 0.0
      },
      {
        "name": "spawns_dev_util",
        "time": 0.0
      },
      {
        "name": "alters_windows_utility",
        "time": 0.0
      },
      {
        "name": "overwrites_accessibility_utility",
        "time": 0.0
      },
      {
        "name": "Potential_Lateral_Movement_Via_SMBEXEC",
        "time": 0.0
      },
      {
        "name": "potential_WebShell_Via_ScreenConnectServer",
        "time": 0.0
      },
      {
        "name": "uses_Microsoft_HTML_Help_Executable",
        "time": 0.0
      },
      {
        "name": "wiper_zeroedbytes",
        "time": 0.0
      },
      {
        "name": "wmi_create_process",
        "time": 0.0
      },
      {
        "name": "wmi_script_process",
        "time": 0.0
      },
      {
        "name": "antianalysis_tls_section",
        "time": 0.0
      },
      {
        "name": "antivirus_clamav",
        "time": 0.0
      },
      {
        "name": "antivirus_virustotal",
        "time": 0.0
      },
      {
        "name": "bad_certs",
        "time": 0.0
      },
      {
        "name": "bad_ssl_certs",
        "time": 0.0
      },
      {
        "name": "banker_zeus_p2p",
        "time": 0.0
      },
      {
        "name": "banker_zeus_url",
        "time": 0.0
      },
      {
        "name": "binary_yara",
        "time": 0.0
      },
      {
        "name": "bot_athenahttp",
        "time": 0.0
      },
      {
        "name": "bot_dirtjumper",
        "time": 0.0
      },
      {
        "name": "bot_drive",
        "time": 0.0
      },
      {
        "name": "bot_drive2",
        "time": 0.0
      },
      {
        "name": "bot_madness",
        "time": 0.0
      },
      {
        "name": "phishing_kit_detected",
        "time": 0.0
      },
      {
        "name": "family_proxyback",
        "time": 0.0
      },
      {
        "name": "flare_capa_antianalysis",
        "time": 0.0
      },
      {
        "name": "flare_capa_collection",
        "time": 0.0
      },
      {
        "name": "flare_capa_communication",
        "time": 0.0
      },
      {
        "name": "flare_capa_compiler",
        "time": 0.0
      },
      {
        "name": "flare_capa_datamanipulation",
        "time": 0.0
      },
      {
        "name": "flare_capa_executable",
        "time": 0.0
      },
      {
        "name": "flare_capa_hostinteraction",
        "time": 0.0
      },
      {
        "name": "flare_capa_impact",
        "time": 0.0
      },
      {
        "name": "flare_capa_lib",
        "time": 0.0
      },
      {
        "name": "flare_capa_linking",
        "time": 0.0
      },
      {
        "name": "flare_capa_loadcode",
        "time": 0.0
      },
      {
        "name": "flare_capa_malwarefamily",
        "time": 0.0
      },
      {
        "name": "flare_capa_nursery",
        "time": 0.0
      },
      {
        "name": "flare_capa_persistence",
        "time": 0.0
      },
      {
        "name": "flare_capa_runtime",
        "time": 0.0
      },
      {
        "name": "flare_capa_targeting",
        "time": 0.0
      },
      {
        "name": "threatfox",
        "time": 0.0
      },
      {
        "name": "log4shell",
        "time": 0.0
      },
      {
        "name": "mimics_extension",
        "time": 0.0
      },
      {
        "name": "network_country_distribution",
        "time": 0.0
      },
      {
        "name": "network_cnc_http",
        "time": 0.004
      },
      {
        "name": "network_ip_exe",
        "time": 0.0
      },
      {
        "name": "network_dga",
        "time": 0.0
      },
      {
        "name": "network_dga_fraunhofer",
        "time": 0.0
      },
      {
        "name": "network_dyndns",
        "time": 0.004
      },
      {
        "name": "network_excessive_udp",
        "time": 0.0
      },
      {
        "name": "network_http",
        "time": 0.001
      },
      {
        "name": "network_icmp",
        "time": 0.0
      },
      {
        "name": "network_irc",
        "time": 0.0
      },
      {
        "name": "network_open_proxy",
        "time": 0.001
      },
      {
        "name": "network_questionable_http_path",
        "time": 0.0
      },
      {
        "name": "network_questionable_https_path",
        "time": 0.0
      },
      {
        "name": "network_smtp",
        "time": 0.0
      },
      {
        "name": "network_torgateway",
        "time": 0.002
      },
      {
        "name": "origin_langid",
        "time": 0.0
      },
      {
        "name": "origin_resource_langid",
        "time": 0.0
      },
      {
        "name": "overlay",
        "time": 0.0
      },
      {
        "name": "packer_unknown_pe_section_name",
        "time": 0.0
      },
      {
        "name": "packer_aspack",
        "time": 0.0
      },
      {
        "name": "packer_aspirecrypt",
        "time": 0.0
      },
      {
        "name": "packer_bedsprotector",
        "time": 0.0
      },
      {
        "name": "packer_confuser",
        "time": 0.0
      },
      {
        "name": "packer_enigma",
        "time": 0.0
      },
      {
        "name": "packer_entropy",
        "time": 0.0
      },
      {
        "name": "packer_mpress",
        "time": 0.0
      },
      {
        "name": "packer_nate",
        "time": 0.0
      },
      {
        "name": "packer_nspack",
        "time": 0.0
      },
      {
        "name": "packer_smartassembly",
        "time": 0.0
      },
      {
        "name": "packer_spices",
        "time": 0.0
      },
      {
        "name": "packer_themida",
        "time": 0.0
      },
      {
        "name": "packer_titan",
        "time": 0.0
      },
      {
        "name": "packer_upx",
        "time": 0.0
      },
      {
        "name": "packer_vmprotect",
        "time": 0.0
      },
      {
        "name": "packer_yoda",
        "time": 0.0
      },
      {
        "name": "pdf_annot_urls_checker",
        "time": 0.0
      },
      {
        "name": "polymorphic",
        "time": 0.0
      },
      {
        "name": "punch_plus_plus_pcres",
        "time": 0.0
      },
      {
        "name": "procmem_yara",
        "time": 0.0
      },
      {
        "name": "recon_checkip",
        "time": 0.0
      },
      {
        "name": "static_authenticode",
        "time": 0.0
      },
      {
        "name": "invalid_authenticode_signature",
        "time": 0.0
      },
      {
        "name": "static_dotnet_anomaly",
        "time": 0.0
      },
      {
        "name": "static_java",
        "time": 0.0
      },
      {
        "name": "static_pdf",
        "time": 0.0
      },
      {
        "name": "contains_pe_overlay",
        "time": 0.0
      },
      {
        "name": "static_pe_anomaly",
        "time": 0.0
      },
      {
        "name": "pe_compile_timestomping",
        "time": 0.0
      },
      {
        "name": "static_pe_pdbpath",
        "time": 0.0
      },
      {
        "name": "static_rat_config",
        "time": 0.0
      },
      {
        "name": "static_versioninfo_anomaly",
        "time": 0.0
      },
      {
        "name": "suricata_alert",
        "time": 0.0
      },
      {
        "name": "suspicious_html_body",
        "time": 0.0
      },
      {
        "name": "suspicious_html_name",
        "time": 0.0
      },
      {
        "name": "suspicious_html_title",
        "time": 0.0
      },
      {
        "name": "volatility_devicetree_1",
        "time": 0.0
      },
      {
        "name": "volatility_handles_1",
        "time": 0.0
      },
      {
        "name": "volatility_ldrmodules_1",
        "time": 0.0
      },
      {
        "name": "volatility_ldrmodules_2",
        "time": 0.0
      },
      {
        "name": "volatility_malfind_1",
        "time": 0.0
      },
      {
        "name": "volatility_malfind_2",
        "time": 0.0
      },
      {
        "name": "volatility_modscan_1",
        "time": 0.0
      },
      {
        "name": "volatility_svcscan_1",
        "time": 0.0
      },
      {
        "name": "volatility_svcscan_2",
        "time": 0.0
      },
      {
        "name": "volatility_svcscan_3",
        "time": 0.0
      },
      {
        "name": "whois_create",
        "time": 0.0
      },
      {
        "name": "accesses_mailslot",
        "time": 0.0
      },
      {
        "name": "accesses_netlogon_regkey",
        "time": 0.001
      },
      {
        "name": "accesses_public_folder",
        "time": 0.0
      },
      {
        "name": "accesses_sysvol",
        "time": 0.001
      },
      {
        "name": "writes_sysvol",
        "time": 0.0
      },
      {
        "name": "adds_admin_user",
        "time": 0.0
      },
      {
        "name": "adds_user",
        "time": 0.0
      },
      {
        "name": "overwrites_admin_password",
        "time": 0.0
      },
      {
        "name": "antianalysis_detectfile",
        "time": 0.007
      },
      {
        "name": "antianalysis_detectreg",
        "time": 0.02
      },
      {
        "name": "modify_attachment_manager",
        "time": 0.0
      },
      {
        "name": "antiav_detectfile",
        "time": 0.012
      },
      {
        "name": "antiav_detectreg",
        "time": 0.096
      },
      {
        "name": "antiav_srp",
        "time": 0.0
      },
      {
        "name": "antiav_whitespace",
        "time": 0.0
      },
      {
        "name": "antidebug_devices",
        "time": 0.002
      },
      {
        "name": "antiemu_windefend",
        "time": 0.001
      },
      {
        "name": "antiemu_wine_reg",
        "time": 0.0
      },
      {
        "name": "antisandbox_cuckoo_files",
        "time": 0.0
      },
      {
        "name": "antisandbox_fortinet_files",
        "time": 0.0
      },
      {
        "name": "antisandbox_joe_anubis_files",
        "time": 0.0
      },
      {
        "name": "antisandbox_sboxie_mutex",
        "time": 0.0
      },
      {
        "name": "antisandbox_sunbelt_files",
        "time": 0.0
      },
      {
        "name": "antisandbox_threattrack_files",
        "time": 0.0
      },
      {
        "name": "antivm_bochs_keys",
        "time": 0.002
      },
      {
        "name": "antivm_generic_bios",
        "time": 0.001
      },
      {
        "name": "antivm_generic_diskreg",
        "time": 0.004
      },
      {
        "name": "antivm_hyperv_keys",
        "time": 0.002
      },
      {
        "name": "antivm_parallels_keys",
        "time": 0.005
      },
      {
        "name": "antivm_recentdocs",
        "time": 0.0
      },
      {
        "name": "antivm_vbox_devices",
        "time": 0.001
      },
      {
        "name": "antivm_vbox_files",
        "time": 0.005
      },
      {
        "name": "antivm_vbox_keys",
        "time": 0.011
      },
      {
        "name": "antivm_vmware_devices",
        "time": 0.0
      },
      {
        "name": "antivm_vmware_files",
        "time": 0.002
      },
      {
        "name": "antivm_vmware_keys",
        "time": 0.007
      },
      {
        "name": "antivm_vmware_mutexes",
        "time": 0.0
      },
      {
        "name": "antivm_vpc_files",
        "time": 0.0
      },
      {
        "name": "antivm_vpc_keys",
        "time": 0.003
      },
      {
        "name": "antivm_vpc_mutex",
        "time": 0.0
      },
      {
        "name": "antivm_xen_keys",
        "time": 0.005
      },
      {
        "name": "asyncrat_mutex",
        "time": 0.0
      },
      {
        "name": "gulpix_behavior",
        "time": 0.0
      },
      {
        "name": "ketrican_regkeys",
        "time": 0.001
      },
      {
        "name": "okrum_mutexes",
        "time": 0.0
      },
      {
        "name": "banker_cridex",
        "time": 0.001
      },
      {
        "name": "geodo_banking_trojan",
        "time": 0.004
      },
      {
        "name": "banker_spyeye_mutexes",
        "time": 0.0
      },
      {
        "name": "banker_zeus_mutex",
        "time": 0.0
      },
      {
        "name": "bitcoin_opencl",
        "time": 0.0
      },
      {
        "name": "enumerates_physical_drives",
        "time": 0.0
      },
      {
        "name": "bot_russkill",
        "time": 0.0
      },
      {
        "name": "browser_addon",
        "time": 0.0
      },
      {
        "name": "chromium_browser_extension_directory",
        "time": 0.0
      },
      {
        "name": "browser_helper_object",
        "time": 0.0
      },
      {
        "name": "browser_security",
        "time": 0.001
      },
      {
        "name": "browser_startpage",
        "time": 0.0
      },
      {
        "name": "ie_disables_process_tab",
        "time": 0.0
      },
      {
        "name": "odbcconf_bypass",
        "time": 0.0
      },
      {
        "name": "squiblydoo_bypass",
        "time": 0.0
      },
      {
        "name": "squiblytwo_bypass",
        "time": 0.0
      },
      {
        "name": "bypass_chromium_protection",
        "time": 0.0
      },
      {
        "name": "bypass_firewall",
        "time": 0.002
      },
      {
        "name": "checks_uac_status",
        "time": 0.001
      },
      {
        "name": "uac_bypass_cmstpcom",
        "time": 0.0
      },
      {
        "name": "uac_bypass_delegateexecute_sdclt",
        "time": 0.0
      },
      {
        "name": "uac_bypass_fodhelper",
        "time": 0.0
      },
      {
        "name": "cape_extracted_content",
        "time": 0.0
      },
      {
        "name": "carberp_mutex",
        "time": 0.0
      },
      {
        "name": "clears_logs",
        "time": 0.0
      },
      {
        "name": "cmdline_obfuscation",
        "time": 0.0
      },
      {
        "name": "cmdline_switches",
        "time": 0.0
      },
      {
        "name": "cmdline_terminate",
        "time": 0.0
      },
      {
        "name": "cmdline_forfiles_wildcard",
        "time": 0.0
      },
      {
        "name": "cmdline_http_link",
        "time": 0.0
      },
      {
        "name": "cmdline_long_string",
        "time": 0.0
      },
      {
        "name": "cmdline_reversed_http_link",
        "time": 0.0
      },
      {
        "name": "long_commandline",
        "time": 0.0
      },
      {
        "name": "powershell_renamed_commandline",
        "time": 0.0
      },
      {
        "name": "copies_self",
        "time": 0.0
      },
      {
        "name": "credwiz_credentialaccess",
        "time": 0.0
      },
      {
        "name": "enables_wdigest",
        "time": 0.0
      },
      {
        "name": "vaultcmd_credentialaccess",
        "time": 0.0
      },
      {
        "name": "file_credential_store_access",
        "time": 0.001
      },
      {
        "name": "file_credential_store_write",
        "time": 0.0
      },
      {
        "name": "kerberos_credential_access_via_rubeus",
        "time": 0.0
      },
      {
        "name": "registry_credential_dumping",
        "time": 0.0
      },
      {
        "name": "registry_credential_store_access",
        "time": 0.001
      },
      {
        "name": "registry_lsa_secrets_access",
        "time": 0.0
      },
      {
        "name": "comsvcs_credentialdump",
        "time": 0.0
      },
      {
        "name": "cryptomining_stratum_command",
        "time": 0.0
      },
      {
        "name": "cypherit_mutexes",
        "time": 0.0
      },
      {
        "name": "darkcomet_regkeys",
        "time": 0.001
      },
      {
        "name": "datop_loader",
        "time": 0.0
      },
      {
        "name": "deepfreeze_mutex",
        "time": 0.0
      },
      {
        "name": "deletes_executed_files",
        "time": 0.0
      },
      {
        "name": "disables_app_launch",
        "time": 0.0
      },
      {
        "name": "disables_auto_app_termination",
        "time": 0.0
      },
      {
        "name": "disables_appv_virtualization",
        "time": 0.0
      },
      {
        "name": "disables_backups",
        "time": 0.001
      },
      {
        "name": "disables_browser_warn",
        "time": 0.001
      },
      {
        "name": "disables_context_menus",
        "time": 0.0
      },
      {
        "name": "disables_cpl_disable",
        "time": 0.0
      },
      {
        "name": "disables_crashdumps",
        "time": 0.0
      },
      {
        "name": "disables_event_logging",
        "time": 0.0
      },
      {
        "name": "disables_folder_options",
        "time": 0.0
      },
      {
        "name": "disables_notificationcenter",
        "time": 0.0
      },
      {
        "name": "disables_power_options",
        "time": 0.001
      },
      {
        "name": "disables_restore_default_state",
        "time": 0.0
      },
      {
        "name": "disables_run_command",
        "time": 0.0
      },
      {
        "name": "disables_smartscreen",
        "time": 0.0
      },
      {
        "name": "disables_startmenu_search",
        "time": 0.0
      },
      {
        "name": "disables_system_restore",
        "time": 0.0
      },
      {
        "name": "disables_uac",
        "time": 0.0
      },
      {
        "name": "disables_wer",
        "time": 0.0
      },
      {
        "name": "disables_windows_defender",
        "time": 0.0
      },
      {
        "name": "disables_windows_defender_logging",
        "time": 0.0
      },
      {
        "name": "removes_windows_defender_contextmenu",
        "time": 0.0
      },
      {
        "name": "removes_windows_defender_updates",
        "time": 0.0
      },
      {
        "name": "windows_defender_powershell",
        "time": 0.0
      },
      {
        "name": "disables_windows_file_protection",
        "time": 0.0
      },
      {
        "name": "disables_windowsupdate",
        "time": 0.0
      },
      {
        "name": "disables_winfirewall",
        "time": 0.0
      },
      {
        "name": "discover_registry_mount_points",
        "time": 0.0
      },
      {
        "name": "adfind_domain_enumeration",
        "time": 0.0
      },
      {
        "name": "domain_enumeration_commands",
        "time": 0.0
      },
      {
        "name": "andromut_mutexes",
        "time": 0.0
      },
      {
        "name": "downloader_cabby",
        "time": 0.0
      },
      {
        "name": "phorpiex_mutexes",
        "time": 0.0
      },
      {
        "name": "protonbot_mutexes",
        "time": 0.0
      },
      {
        "name": "driver_filtermanager",
        "time": 0.0
      },
      {
        "name": "dropper",
        "time": 0.0
      },
      {
        "name": "dll_archive_execution",
        "time": 0.0
      },
      {
        "name": "lnk_archive_execution",
        "time": 0.0
      },
      {
        "name": "script_archive_execution",
        "time": 0.0
      },
      {
        "name": "excel4_macro_urls",
        "time": 0.0
      },
      {
        "name": "escalate_privilege_via_ntlm_relay",
        "time": 0.0
      },
      {
        "name": "spooler_access",
        "time": 0.0
      },
      {
        "name": "spooler_svc_start",
        "time": 0.0
      },
      {
        "name": "mapped_drives_uac",
        "time": 0.0
      },
      {
        "name": "hides_recycle_bin_icon",
        "time": 0.0
      },
      {
        "name": "apocalypse_stealer_file_behavior",
        "time": 0.0
      },
      {
        "name": "arkei_files",
        "time": 0.0
      },
      {
        "name": "azorult_mutexes",
        "time": 0.001
      },
      {
        "name": "infostealer_bitcoin",
        "time": 0.007
      },
      {
        "name": "cryptbot_files",
        "time": 0.001
      },
      {
        "name": "echelon_files",
        "time": 0.001
      },
      {
        "name": "infostealer_ftp",
        "time": 0.036
      },
      {
        "name": "infostealer_im",
        "time": 0.021
      },
      {
        "name": "infostealer_mail",
        "time": 0.009
      },
      {
        "name": "masslogger_files",
        "time": 0.0
      },
      {
        "name": "poullight_files",
        "time": 0.003
      },
      {
        "name": "purplewave_mutexes",
        "time": 0.0
      },
      {
        "name": "quilclipper_mutexes",
        "time": 0.0
      },
      {
        "name": "qulab_files",
        "time": 0.002
      },
      {
        "name": "qulab_mutexes",
        "time": 0.0
      },
      {
        "name": "asyncrat_mutex",
        "time": 0.0
      },
      {
        "name": "Evade_Execution_Via_ASPNet_Compiler",
        "time": 0.0
      },
      {
        "name": "Evade_Execute_Via_DeviceCredentialDeployment",
        "time": 0.0
      },
      {
        "name": "Evade_Execution_Via_Filter_Manager_Control",
        "time": 0.0
      },
      {
        "name": "Evade_Execution_Via_Intel_GFXDownloadWrapper",
        "time": 0.0
      },
      {
        "name": "execute_binary_via_appvlp",
        "time": 0.0
      },
      {
        "name": "execute_binary_via_pcalua",
        "time": 0.0
      },
      {
        "name": "Execute_Binary_Via_OpenSSH",
        "time": 0.0
      },
      {
        "name": "execute_binary_via_pcalua",
        "time": 0.0
      },
      {
        "name": "Execute_Binary_Via_PesterPSModule",
        "time": 0.0
      },
      {
        "name": "Execute_Binary_Via_ScriptRunner",
        "time": 0.0
      },
      {
        "name": "execute_binary_via_ttdinject",
        "time": 0.0
      },
      {
        "name": "Execute_Binary_Via_VisualStudioLiveShare",
        "time": 0.0
      },
      {
        "name": "Execute_Msiexec_Via_Explorer",
        "time": 0.0
      },
      {
        "name": "execute_remote_msi",
        "time": 0.0
      },
      {
        "name": "execute_suspicious_powershell_via_runscripthelper",
        "time": 0.0
      },
      {
        "name": "execute_suspicious_powershell_via_sqlps",
        "time": 0.0
      },
      {
        "name": "Indirect_Command_Execution_Via_ConsoleWindowHost",
        "time": 0.0
      },
      {
        "name": "Perform_Malicious_Activities_Via_Headless_Browser",
        "time": 0.0
      },
      {
        "name": "Register_DLL_Via_CertOC",
        "time": 0.0
      },
      {
        "name": "Register_DLL_Via_MSIEXEC",
        "time": 0.0
      },
      {
        "name": "Register_DLL_Via_Odbcconf",
        "time": 0.0
      },
      {
        "name": "Scriptlet_Proxy_Execution_Via_Pubprn",
        "time": 0.0
      },
      {
        "name": "ie_martian_children",
        "time": 0.0
      },
      {
        "name": "office_martian_children",
        "time": 0.0
      },
      {
        "name": "mimics_icon",
        "time": 0.0
      },
      {
        "name": "masquerade_process_name",
        "time": 0.011
      },
      {
        "name": "mimikatz_modules",
        "time": 0.0
      },
      {
        "name": "ms_office_cmd_rce",
        "time": 0.0
      },
      {
        "name": "mount_copy_to_webdav_share",
        "time": 0.0
      },
      {
        "name": "potential_protocol_tunneling_via_legit_utilities",
        "time": 0.0
      },
      {
        "name": "potential_protocol_tunneling_via_qemu",
        "time": 0.0
      },
      {
        "name": "suspicious_execution_via_dotnet_remoting",
        "time": 0.0
      },
      {
        "name": "modify_certs",
        "time": 0.0
      },
      {
        "name": "dotnet_clr_usagelog_regkeys",
        "time": 0.0
      },
      {
        "name": "modify_hostfile",
        "time": 0.0
      },
      {
        "name": "modify_oem_information",
        "time": 0.0
      },
      {
        "name": "modify_security_center_warnings",
        "time": 0.0
      },
      {
        "name": "modify_uac_prompt",
        "time": 0.0
      },
      {
        "name": "network_dns_blockchain",
        "time": 0.0
      },
      {
        "name": "network_dns_opennic",
        "time": 0.001
      },
      {
        "name": "network_dns_paste_site",
        "time": 0.001
      },
      {
        "name": "network_dns_reverse_proxy",
        "time": 0.0
      },
      {
        "name": "network_dns_temp_file_storage",
        "time": 0.001
      },
      {
        "name": "network_dns_temp_urldns",
        "time": 0.0
      },
      {
        "name": "network_dns_url_shortener",
        "time": 0.009
      },
      {
        "name": "network_dns_doh_tls",
        "time": 0.0
      },
      {
        "name": "suspicious_tld",
        "time": 0.007
      },
      {
        "name": "network_tor_service",
        "time": 0.0
      },
      {
        "name": "office_code_page",
        "time": 0.0
      },
      {
        "name": "office_addinloading",
        "time": 0.0
      },
      {
        "name": "office_perfkey",
        "time": 0.0
      },
      {
        "name": "office_macro",
        "time": 0.0
      },
      {
        "name": "changes_trust_center_settings",
        "time": 0.0
      },
      {
        "name": "disables_vba_trust_access",
        "time": 0.0
      },
      {
        "name": "office_macro_autoexecution",
        "time": 0.0
      },
      {
        "name": "office_macro_ioc",
        "time": 0.0
      },
      {
        "name": "office_macro_malicious_prediction",
        "time": 0.0
      },
      {
        "name": "office_macro_suspicious",
        "time": 0.0
      },
      {
        "name": "rtf_aslr_bypass",
        "time": 0.0
      },
      {
        "name": "rtf_anomaly_characterset",
        "time": 0.0
      },
      {
        "name": "rtf_anomaly_version",
        "time": 0.0
      },
      {
        "name": "rtf_embedded_content",
        "time": 0.0
      },
      {
        "name": "rtf_embedded_office_file",
        "time": 0.0
      },
      {
        "name": "rtf_exploit_static",
        "time": 0.0
      },
      {
        "name": "office_security",
        "time": 0.0
      },
      {
        "name": "accesses_office_username",
        "time": 0.0
      },
      {
        "name": "office_anomalous_feature",
        "time": 0.0
      },
      {
        "name": "office_dde_command",
        "time": 0.0
      },
      {
        "name": "packer_armadillo_mutex",
        "time": 0.0
      },
      {
        "name": "packer_armadillo_regkey",
        "time": 0.0
      },
      {
        "name": "persistence_ads",
        "time": 0.0
      },
      {
        "name": "persistence_safeboot",
        "time": 0.0
      },
      {
        "name": "persistence_ifeo",
        "time": 0.0
      },
      {
        "name": "persistence_silent_process_exit",
        "time": 0.0
      },
      {
        "name": "persistence_rdp_registry",
        "time": 0.0
      },
      {
        "name": "persistence_rdp_shadowing",
        "time": 0.0
      },
      {
        "name": "persistence_service",
        "time": 0.0
      },
      {
        "name": "persistence_shim_database",
        "time": 0.0
      },
      {
        "name": "powerpool_mutexes",
        "time": 0.0
      },
      {
        "name": "powershell_scriptblock_logging",
        "time": 0.0
      },
      {
        "name": "powershell_command_suspicious",
        "time": 0.0
      },
      {
        "name": "powershell_history_save_mod",
        "time": 0.0
      },
      {
        "name": "powershell_renamed",
        "time": 0.0
      },
      {
        "name": "powershell_reversed",
        "time": 0.0
      },
      {
        "name": "powershell_variable_obfuscation",
        "time": 0.0
      },
      {
        "name": "prevents_safeboot",
        "time": 0.0
      },
      {
        "name": "cmdline_process_discovery",
        "time": 0.0
      },
      {
        "name": "cryptomix_mutexes",
        "time": 0.0
      },
      {
        "name": "dharma_mutexes",
        "time": 0.0
      },
      {
        "name": "ransomware_extensions_generic",
        "time": 0.0
      },
      {
        "name": "ransomware_extensions_known",
        "time": 0.007
      },
      {
        "name": "ransomware_files",
        "time": 0.01
      },
      {
        "name": "fonix_mutexes",
        "time": 0.0
      },
      {
        "name": "gandcrab_mutexes",
        "time": 0.0
      },
      {
        "name": "germanwiper_mutexes",
        "time": 0.0
      },
      {
        "name": "medusalocker_mutexes",
        "time": 0.0
      },
      {
        "name": "medusalocker_regkeys",
        "time": 0.001
      },
      {
        "name": "nemty_mutexes",
        "time": 0.0
      },
      {
        "name": "nemty_regkeys",
        "time": 0.0
      },
      {
        "name": "pysa_mutexes",
        "time": 0.0
      },
      {
        "name": "ransomware_radamant",
        "time": 0.0
      },
      {
        "name": "ransomware_recyclebin",
        "time": 0.0
      },
      {
        "name": "revil_mutexes",
        "time": 0.001
      },
      {
        "name": "ransomware_revil_regkey",
        "time": 0.0
      },
      {
        "name": "satan_mutexes",
        "time": 0.0
      },
      {
        "name": "snake_ransom_mutexes",
        "time": 0.0
      },
      {
        "name": "stop_ransom_mutexes",
        "time": 0.0
      },
      {
        "name": "stop_ransomware_cmd",
        "time": 0.0
      },
      {
        "name": "ransomware_stopdjvu",
        "time": 0.0
      },
      {
        "name": "rat_beebus_mutexes",
        "time": 0.0
      },
      {
        "name": "blacknet_mutexes",
        "time": 0.0
      },
      {
        "name": "blackrat_mutexes",
        "time": 0.0
      },
      {
        "name": "crat_mutexes",
        "time": 0.0
      },
      {
        "name": "dcrat_files",
        "time": 0.0
      },
      {
        "name": "dcrat_mutexes",
        "time": 0.0
      },
      {
        "name": "rat_fynloski_mutexes",
        "time": 0.0
      },
      {
        "name": "limerat_mutexes",
        "time": 0.0
      },
      {
        "name": "limerat_regkeys",
        "time": 0.001
      },
      {
        "name": "lodarat_file_behavior",
        "time": 0.0
      },
      {
        "name": "modirat_behavior",
        "time": 0.001
      },
      {
        "name": "njrat_regkeys",
        "time": 0.0
      },
      {
        "name": "obliquerat_files",
        "time": 0.001
      },
      {
        "name": "obliquerat_mutexes",
        "time": 0.0
      },
      {
        "name": "parallax_mutexes",
        "time": 0.0
      },
      {
        "name": "rat_pcclient",
        "time": 0.001
      },
      {
        "name": "rat_plugx_mutexes",
        "time": 0.0
      },
      {
        "name": "rat_poisonivy_mutexes",
        "time": 0.0
      },
      {
        "name": "rat_quasar_mutexes",
        "time": 0.0
      },
      {
        "name": "ratsnif_mutexes",
        "time": 0.0
      },
      {
        "name": "rat_spynet",
        "time": 0.0
      },
      {
        "name": "venomrat_mutexes",
        "time": 0.0
      },
      {
        "name": "warzonerat_files",
        "time": 0.001
      },
      {
        "name": "warzonerat_regkeys",
        "time": 0.001
      },
      {
        "name": "xpertrat_files",
        "time": 0.0
      },
      {
        "name": "xpertrat_mutexes",
        "time": 0.0
      },
      {
        "name": "rat_xtreme_mutexes",
        "time": 0.0
      },
      {
        "name": "reads_password_database",
        "time": 0.001
      },
      {
        "name": "recon_fingerprint",
        "time": 0.001
      },
      {
        "name": "remcos_files",
        "time": 0.001
      },
      {
        "name": "remcos_mutexes",
        "time": 0.0
      },
      {
        "name": "remcos_regkeys",
        "time": 0.001
      },
      {
        "name": "rdptcp_key",
        "time": 0.0
      },
      {
        "name": "uses_rdp_clip",
        "time": 0.0
      },
      {
        "name": "uses_remote_desktop_session",
        "time": 0.0
      },
      {
        "name": "removes_networking_icon",
        "time": 0.0
      },
      {
        "name": "removes_pinned_programs",
        "time": 0.0
      },
      {
        "name": "removes_security_maintenance_icon",
        "time": 0.0
      },
      {
        "name": "removes_startmenu_defaults",
        "time": 0.0
      },
      {
        "name": "removes_username_startmenu",
        "time": 0.0
      },
      {
        "name": "spicyhotpot_behavior",
        "time": 0.0
      },
      {
        "name": "sniffer_winpcap",
        "time": 0.001
      },
      {
        "name": "spreading_autoruninf",
        "time": 0.0
      },
      {
        "name": "stealth_hidden_extension",
        "time": 0.0
      },
      {
        "name": "stealth_hiddenreg",
        "time": 0.0
      },
      {
        "name": "stealth_hide_notifications",
        "time": 0.0
      },
      {
        "name": "stealth_webhistory",
        "time": 0.0
      },
      {
        "name": "sysinternals_psexec",
        "time": 0.0
      },
      {
        "name": "sysinternals_tools",
        "time": 0.0
      },
      {
        "name": "language_check_registry",
        "time": 0.001
      },
      {
        "name": "tampers_etw",
        "time": 0.001
      },
      {
        "name": "lsa_tampering",
        "time": 0.0
      },
      {
        "name": "tampers_powershell_logging",
        "time": 0.0
      },
      {
        "name": "targeted_flame",
        "time": 0.001
      },
      {
        "name": "territorial_disputes_sigs",
        "time": 0.033
      },
      {
        "name": "trickbot_mutex",
        "time": 0.0
      },
      {
        "name": "fleercivet_mutex",
        "time": 0.0
      },
      {
        "name": "lokibot_mutexes",
        "time": 0.001
      },
      {
        "name": "ursnif_behavior",
        "time": 0.001
      },
      {
        "name": "uses_adfind",
        "time": 0.0
      },
      {
        "name": "uses_ms_protocol",
        "time": 0.0
      },
      {
        "name": "neshta_mutexes",
        "time": 0.0
      },
      {
        "name": "renamer_mutexes",
        "time": 0.0
      },
      {
        "name": "owa_web_shell_files",
        "time": 0.0
      },
      {
        "name": "web_shell_files",
        "time": 0.0
      },
      {
        "name": "web_shell_processes",
        "time": 0.0
      },
      {
        "name": "dotnet_csc_build",
        "time": 0.0
      },
      {
        "name": "mavinject_lolbin",
        "time": 0.0
      },
      {
        "name": "multiple_explorer_instances",
        "time": 0.0
      },
      {
        "name": "script_tool_executed",
        "time": 0.0
      },
      {
        "name": "suspicious_certutil_use",
        "time": 0.0
      },
      {
        "name": "suspicious_command_tools",
        "time": 0.0
      },
      {
        "name": "suspicious_mpcmdrun_use",
        "time": 0.0
      },
      {
        "name": "suspicious_ping_use",
        "time": 0.0
      },
      {
        "name": "uses_powershell_copyitem",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_appcmd",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_csvde_ldifde",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_cipher",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_clickonce",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_curl",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_dsquery",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_esentutl",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_finger",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_mode",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_ntdsutil",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_nltest",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_setx",
        "time": 0.0
      },
      {
        "name": "uses_windows_utilities_xcopy",
        "time": 0.0
      },
      {
        "name": "wmic_command_suspicious",
        "time": 0.0
      },
      {
        "name": "scrcons_wmi_script_consumer",
        "time": 0.0
      },
      {
        "name": "allaple_mutexes",
        "time": 0.0
      }
    ],
    "reporting": [
      {
        "name": "BinGraph",
        "time": 0.0
      }
    ]
  },
  "target": {
    "category": "file",
    "file": {
      "name": "91d880890f6e481edcbe.exe",
      "path": "/opt/CAPEv2/storage/binaries/91d880890f6e481edcbe0c5a1a26e8b343d2abeaf4d8c62de04bc75aea6aa7d4",
      "guest_paths": "",
      "size": 207360,
      "crc32": "564B6117",
      "md5": "83bea0f0e38b68c60905c8338a377856",
      "sha1": "66da5c57f3d1dc0949b7408d7fe2c6458bed9f0b",
      "sha256": "91d880890f6e481edcbe0c5a1a26e8b343d2abeaf4d8c62de04bc75aea6aa7d4",
      "sha512": "27ef3b57796e1a68b2df595c6b2b895962a8bfb2e2d1a73c92239355974cfcc5354c1098fa4e7ca0261f5985e2dd9cbb63a373fa20ea3e340bf8dbe9d88d0569",
      "rh_hash": null,
      "ssdeep": "6144:4LV6Bta6dtJmakIM5fKMlO/0hdzxdBQkJy:4LV6BtpmkcKMPzN2",
      "type": "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows",
      "yara": [
        {
          "name": "DITEKSHEN_MALWARE_Win_Nanocore",
          "meta": {
            "description": "Detects NanoCore",
            "author": "ditekSHen",
            "id": "931b98f6-df2b-538b-bc49-ecbbd24334da",
            "date": "2020-11-06",
            "modified": "2024-11-01",
            "reference": "https://github.com/ditekshen/detection",
            "source_url": "https://github.com/ditekshen/detection/blob/e76c93dcdedff04076380ffc60ea54e45b313635/yara/malware.yar#L7654-L7681",
            "license_url": "https://github.com/ditekshen/detection/blob/e76c93dcdedff04076380ffc60ea54e45b313635/LICENSE.txt",
            "logic_hash": "6336260e0af2b4b51338ee066f41b7c58aa134a6c03ca110db7e088edf2b65a7",
            "score": 75,
            "quality": 75,
            "tags": "FILE"
          },
          "strings": [
            "NanoCore Client",
            "NanoCore.ClientPlugin",
            "NanoCore.ClientPluginHost",
            "IClientApp",
            "IClientData",
            "IClientNetwork",
            "IClientAppHost",
            "IClientDataHost",
            "IClientLoggingHost",
            "IClientNetworkHost",
            "IClientUIHost",
            "IClientNameObjectCollection",
            "IClientReadOnlyNameObjectCollection",
            "ClientPlugin",
            "EndPoint",
            "IPAddress",
            "IPEndPoint",
            "get_ClientSettings",
            "get_Connected"
          ],
          "addresses": {
            "x1": 65285,
            "x2": 65869,
            "x3": 65933,
            "i1": 65858,
            "i2": 65891,
            "i3": 65903,
            "i4": 65918,
            "i5": 65959,
            "i6": 65975,
            "i7": 65994,
            "i8": 66013,
            "i9": 66027,
            "i10": 66055,
            "s1": 65878,
            "s2": 67146,
            "s3": 67155,
            "s4": 67165,
            "s6": 73875,
            "s7": 75319
          }
        },
        {
          "name": "Windows_Trojan_Nanocore_d8c4e3c5",
          "meta": {
            "author": "Elastic Security",
            "id": "d8c4e3c5-8bcc-43d2-9104-fa3774282da5",
            "fingerprint": "e5c284f14c1c650ef8ddd7caf314f5318e46a811addc2af5e70890390c7307d4",
            "creation_date": "2021-06-13",
            "last_modified": "2021-08-23",
            "threat_name": "Windows.Trojan.Nanocore",
            "reference_sample": "b2262126a955e306dc68487333394dc08c4fbd708a19afeb531f58916ddb1cfd",
            "severity": 100,
            "arch_context": "x86, arm64",
            "scan_context": "file, memory",
            "license": "Elastic License v2",
            "os": "windows"
          },
          "strings": [
            "NanoCore.ClientPluginHost",
            "NanoCore.ClientPlugin",
            "get_BuilderSettings",
            "ClientLoaderForm.resources",
            "PluginCommand",
            "IClientAppHost",
            "GetBlockHash",
            "AddHostEntry",
            "LogClientException",
            "PipeExists",
            "IClientLoggingHost"
          ],
          "addresses": {
            "a1": 65933,
            "a2": 65869,
            "b1": 73894,
            "b2": 65449,
            "b3": 71622,
            "b4": 65918,
            "b5": 108030,
            "b6": 75518,
            "b7": 91121,
            "b8": 75371,
            "b9": 65975
          }
        },
        {
          "name": "Nanocore",
          "meta": {
            "description": "detect Nanocore in memory",
            "author": "JPCERT/CC Incident Response Group",
            "rule_usage": "memory scan",
            "reference": "internal research"
          },
          "strings": [
            "NanoCore Client",
            "PluginCommand",
            "CommandType"
          ],
          "addresses": {
            "v1": 65285,
            "v2": 71622,
            "v3": 71598
          }
        },
        {
          "name": "Nanocore_RAT_Gen_2",
          "meta": {
            "description": "Detetcs the Nanocore RAT",
            "author": "Florian Roth",
            "score": 100,
            "reference": "https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/",
            "date": "2016-04-22",
            "hash1": "755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050"
          },
          "strings": [
            "NanoCore.ClientPluginHost",
            "IClientNetworkHost",
            "#=qjgz7ljmpp0J7FvL9dmi8ctJILdgtcbw8JYUc6GC8MeJ9B11Crfg2Djxcf0p8PZGe"
          ],
          "addresses": {
            "x1": 65933,
            "x2": 65994,
            "x3": 81149
          }
        },
        {
          "name": "NanoCore",
          "meta": {
            "author": " Kevin Breen <kevin@techanarchy.net>",
            "date": "2014/04",
            "ref": "http://malwareconfig.com/stats/NanoCore",
            "maltype": "Remote Access Trojan",
            "filetype": "exe"
          },
          "strings": [
            "NanoCore",
            "ClientPlugin",
            "ProjectData",
            "DESCrypto",
            "KeepAlive",
            "LogClientMessage",
            "get_Connected",
            "#=q"
          ],
          "addresses": {
            "a": 65933,
            "b": 65942,
            "c": 65659,
            "d": 68226,
            "e": 99406,
            "g": 91196,
            "i": 75319,
            "j": 108466
          }
        },
        {
          "name": "NETexecutableMicrosoft",
          "meta": {
            "author": "malware-lu"
          },
          "strings": [
            "{ 00 00 00 00 00 00 00 00 5F 43 6F 72 45 78 65 4D 61 69 6E 00 6D 73 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 }"
          ],
          "addresses": {
            "a0": 117102
          }
        },
        {
          "name": "IsPE32",
          "meta": {},
          "strings": [],
          "addresses": {}
        },
        {
          "name": "IsNET_EXE",
          "meta": {},
          "strings": [],
          "addresses": {}
        },
        {
          "name": "IsWindowsGUI",
          "meta": {},
          "strings": [],
          "addresses": {}
        },
        {
          "name": "IsPacked",
          "meta": {
            "description": "Entropy Check"
          },
          "strings": [],
          "addresses": {}
        },
        {
          "name": "Microsoft_Visual_Studio_NET",
          "meta": {},
          "strings": [
            "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
          ],
          "addresses": {
            "a": 117138
          }
        },
        {
          "name": "Microsoft_Visual_C_v70_Basic_NET_additional",
          "meta": {},
          "strings": [
            "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
          ],
          "addresses": {
            "a": 117138
          }
        },
        {
          "name": "Microsoft_Visual_C_Basic_NET",
          "meta": {},
          "strings": [
            "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
          ],
          "addresses": {
            "b": 117138
          }
        },
        {
          "name": "Microsoft_Visual_Studio_NET_additional",
          "meta": {},
          "strings": [
            "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
          ],
          "addresses": {
            "a": 117138
          }
        },
        {
          "name": "Microsoft_Visual_C_v70_Basic_NET",
          "meta": {},
          "strings": [
            "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
          ],
          "addresses": {
            "b": 117138
          }
        },
        {
          "name": "NET_executable_",
          "meta": {},
          "strings": [
            "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
          ],
          "addresses": {
            "a": 117138
          }
        },
        {
          "name": "NET_executable",
          "meta": {},
          "strings": [
            "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
          ],
          "addresses": {
            "b": 117138
          }
        }
      ],
      "cape_yara": [
        {
          "name": "NanoCore",
          "meta": {
            "author": " Kevin Breen <kevin@techanarchy.net>",
            "ref": "http://malwareconfig.com/stats/NanoCore",
            "maltype": "Remote Access Trojan",
            "filetype": "exe",
            "cape_type": "NanoCore Payload"
          },
          "strings": [
            "NanoCore",
            "ClientPlugin",
            "ProjectData",
            "DESCrypto",
            "KeepAlive",
            "LogClientMessage",
            "get_Connected",
            "#=q"
          ],
          "addresses": {
            "a": 65933,
            "b": 65942,
            "c": 65659,
            "d": 68226,
            "e": 99406,
            "g": 91196,
            "i": 75319,
            "j": 108466
          }
        }
      ],
      "clamav": [],
      "tlsh": "T11E14CF5537A84A3FE29E86B9212212139379C2E3A9C3F3EE1CD465B35F563E50A071D3",
      "sha3_384": "09f8759335170cb2a4dc486968617051d7846fe0b2ed019788aaa77656a0ed3bce5d73ec8e33dd89e632050154be137c",
      "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
      "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
      "pe": {
        "guest_signers": {
          "aux_sha1": null,
          "aux_timestamp": null,
          "aux_valid": false,
          "aux_error": true,
          "aux_error_desc": "No signature found.",
          "aux_signers": []
        },
        "digital_signers": [],
        "imagebase": "0x00400000",
        "entrypoint": "0x0001e792",
        "ep_bytes": "ff250020400000000000000000000000",
        "peid_signatures": null,
        "reported_checksum": "0x00000000",
        "actual_checksum": "0x00034045",
        "osversion": "4.0",
        "machine_type": "IMAGE_FILE_MACHINE_I386",
        "pdbpath": null,
        "imports": {
          "mscoree": {
            "dll": "mscoree.dll",
            "imports": [
              {
                "address": "0x402000",
                "name": "_CorExeMain"
              }
            ]
          }
        },
        "exported_dll_name": null,
        "exports": [],
        "dirents": [
          {
            "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
            "virtual_address": "0x0001e738",
            "size": "0x00000057"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
            "virtual_address": "0x00022000",
            "size": "0x00015dcc"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
            "virtual_address": "0x00020000",
            "size": "0x0000000c"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_TLS",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_IAT",
            "virtual_address": "0x00002000",
            "size": "0x00000008"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
            "virtual_address": "0x00002008",
            "size": "0x00000048"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          }
        ],
        "sections": [
          {
            "name": ".text",
            "raw_address": "0x00000200",
            "virtual_address": "0x00002000",
            "virtual_size": "0x0001c798",
            "size_of_data": "0x0001c800",
            "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
            "characteristics_raw": "0x60000020",
            "entropy": "6.60"
          },
          {
            "name": ".reloc",
            "raw_address": "0x0001ca00",
            "virtual_address": "0x00020000",
            "virtual_size": "0x0000000c",
            "size_of_data": "0x00000200",
            "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
            "characteristics_raw": "0x42000040",
            "entropy": "0.10"
          },
          {
            "name": ".rsrc",
            "raw_address": "0x0001cc00",
            "virtual_address": "0x00022000",
            "virtual_size": "0x00015dcc",
            "size_of_data": "0x00015e00",
            "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
            "characteristics_raw": "0x40000040",
            "entropy": "8.00"
          }
        ],
        "overlay": null,
        "resources": [
          {
            "name": "RT_RCDATA",
            "offset": "0x000220a0",
            "size": "0x00015d18",
            "filetype": null,
            "language": "LANG_NEUTRAL",
            "sublanguage": "SUBLANG_NEUTRAL",
            "entropy": "8.00"
          },
          {
            "name": "RT_GROUP_ICON",
            "offset": "0x00037db8",
            "size": "0x00000014",
            "filetype": null,
            "language": "LANG_NEUTRAL",
            "sublanguage": "SUBLANG_NEUTRAL",
            "entropy": "3.40"
          }
        ],
        "versioninfo": [],
        "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
        "timestamp": "2015-02-22 00:49:37",
        "icon": null,
        "icon_hash": null,
        "icon_fuzzy": null,
        "icon_dhash": null,
        "imported_dll_count": 1
      },
      "data": null,
      "strings": [
        "#=qoTNlk$Wngv$bqPRyj4mJig==",
        "Environment",
        "#=qKraENZVscKMtH4GMIJjzqA==",
        "_Lambda$__2",
        "ReadInt16",
        "NtSetInformationProcess",
        "0csX=",
        "pd.ir/",
        "0z-a6",
        "RebuildHostCache",
        "EndPoint",
        "Random",
        "#=qbwvWShVSL8DgrXXfPQ9kNmpf6pmcj6q57bPfcsBp938=",
        "WriteAllText",
        "AddressFamily",
        "#=qZ8pysPk74rQ5GX0s5CkOJQ==",
        "Int32",
        "]g0\\c",
        "FdJJB",
        "maH/q",
        "#=qYpD2x2QTNARNJcnXxG0OjQ==",
        "r#$S-u",
        "$\\2N(",
        "#=qeMVJwq86lZc4hsNJNMQJVYiQqG94mfqhBGc9gH9UUgM=",
        "#=qB4sApeDyjGxBivHLwR3FTJejGBlbih3hr3f3TS7BFbY=",
        "N?#H\\\\\"",
        "System.Text",
        "#=qmcl1D6lgUOLuKGFFyxMamg==",
        "FileCommand",
        "#=qN9Enun6Rlq30xNdBjhzY0A==",
        "#=qJT4I5hOweIk$xYFEeDszbikglXCuquUd$v9AXtyq2ns=",
        "#=q4X5fhkJm5XS4LlpLIyB6bA==",
        "add_Completed",
        "Pl3SrvO",
        "Uninstall",
        "6Im'@B",
        "#=qq_SehjaC_F9U66vu1NLqjA==",
        "#=qL6PdpQwMNSdyVKw3FgboNw==",
        "#=qPfVuk6552RtecCgHDnGSkA==",
        "#=qkcVkJskuGA4o7kGuN79i1w==",
        "#=q$6NbEg0Hb4neXdXPgEgHJA==",
        "#=qd8WIZO8f6IRqdUmvxawj1w==",
        "#=qGxD085Z3RQaUY4iGwWH$xgEmRYVWDAN6hxNjaXokfVc=",
        "Q01x~",
        "#=qyM$eq2QFDjIwNzxtrtw3WE5gHFsUOsREqnRunYWzTvs=",
        "ReadAllBytes",
        "FileStream",
        "MemberInfo",
        "h\"Nv<]c]'",
        "get_Width",
        "#=qCJD3QzeNpOG7t7hUNPqgxgwPhMjv4aui2ikN049iz28=",
        "#=qzRcQ_b8FoTlpKT_BObsgBl2bj71wU5HcYdpIIgiTJ5c=",
        "#=q$njopRrPblqe$yrs$rsu5Q==",
        "SpecialFolder",
        "#=q5QHPwKvqpNRA$cKFBj8i9w==",
        "#=q$YUIMaEFO5IFZXBvo0kclw==",
        "DebuggerDisplayAttribute",
        "#=q$yU7aYEYOl8Nz4sJLGQQ6w==",
        "#=qh42qYul4hj$aa5mluadvLA==",
        "IClientLoggingHost",
        "System.Security.Principal",
        "N-zQ?",
        "UnhandledExceptionEventHandler",
        "#=qaWedjkiL7CWj9EfMXrEg6Q==",
        "k6~$|",
        "Socket",
        "#=q6tJHosKuF0IY3gGxjaveNw==",
        "#=q$P4U7B6$qbq6QJ_QX8MfyNoxYRq3foNT$OZzr5yEqDQ=",
        "#=qK$702nkzQ4rQ0lJLQZ2zaw==",
        "#=qAfx0INrfgWoPN$Cz4VEZYVFcKNxFeYaixc4CaQpU$0g=",
        "r;< L",
        "#=q5C_es0qgtlVCNxzfPQ_idg==",
        "DeflateStream",
        "IClientApp",
        "8.0.0.0",
        "#=qnonybcfG2jzQ4kHK5lGw3g==",
        "#=qJtsKc7ccoU8jRrRMGJWqhA==",
        "#=qRvcNy1bY28C6xYdCX8MF7w==",
        "#=qFm7s8q151MPpLODhzLizPw==",
        "mscorlib",
        "#=qMMPHzLKw8_cOGV193acukw==",
        "NewGuid",
        "D0E=Z",
        "';Tej^",
        "get_Buffer",
        "ToLower",
        "#=qnB6QgyVNIUL$Uq0GD3p5d7LpaFZvHrB3jSqhv3o7qlE=",
        "Acof;",
        "7dEt7]",
        "#=qJZLeQthAfpiCw0QvZb7htA==",
        "#=qjgz7ljmpp0J7FvL9dmi8ctJILdgtcbw8JYUc6GC8MeJ9B11Crfg2Djxcf0p8PZGe",
        "#=qRxyF5FV01AHvUkR3BeX8OA==",
        "feffefefea",
        "Sleep",
        "#=q6jLYuOOmC$a9_UySsUlsFA==",
        "GetString",
        "#=qfkwtPDg_wfxGVFOXd$WnCA==",
        "#=qQR2R27CtTwLSuNC54_JY1g==",
        "_Lambda$__10",
        "#=qFlz$$vhlrnZb7YOji0eF_QZBzkOajT0w3UoQbgnXVIA=",
        "Decimal",
        "Microsoft.VisualBasic.Devices",
        "#=qikBX_CmS$ZzVAuq$nQJBDwmLm5Gee1iPlPuvI188Ejo=",
        "#=q12n1704BGxiT9AoOoTNqog==",
        "Resize",
        "#=qtxvtUAtG5kwD1CbaXqZpxrHWaxR5CiRO2OiaCLfsbSk=",
        "#=qBpzegr6XzkmtwALf7kKPHV3RZVAWYLbYE79PiG2zXYs=",
        "#=qfsxP7vyadqL93mAkiQXr1tsUC0B$7Gp0ZNAPpjNxIG0=",
        "#=qN9oos_gePS4akhGX5rjcOjS2FNZJlTAkUnO0Ykgu7Rk=",
        "#=qQyvT61RAfdEUvn1jBvcx0Q==",
        "get_AddressList",
        "A}p8K5o",
        "EntryExists",
        "#=qoGHQsKlZ7jK$YeTeBpzDNYYM4Z1FIrOpXaDV$VTAdfM=",
        "Process",
        "#=qHamFicykpD9fQKnU2wtqJw==",
        "I!4M&",
        "#=qWaMf_MISHPEu34of2Bm5$ay6Z6PuaGN7w1jlKYjzwdE=",
        "~BXV9C",
        "w0%OC",
        "Qa\"Kr",
        "#=qlV3FbiF00r5Vrp5nqoncyxDHZMuHB7yuJa7xS77K3BQ=",
        "07LJ)",
        "#=qvPYkN4Wli543LScsy6rh$bZ0bDIN0tYd5zlNUibOEKfBRc13v6NIDRtsxPOZzKpX",
        "#=qE8a8ikTp6zyXXyhNYzK8Wg==",
        "#=qScWgGHvDwJ0da_7qXoO28aGE1ea7zp5$XjEJLTXkuHQ=",
        "SocketException",
        "GC'A/F",
        "ResolveEventHandler",
        "System",
        "#=qKxYY$jYG8_7mT_7R0n5jfw==",
        "#=q5s6lzZCgRNNe2Z9HZfa94HOHkpUfSnAwZsGo$hzh7hY=",
        "get_ExceptionObject",
        "ReceiveAsync",
        "#=qksh921Ur22JKhSIAXESSag==",
        "#=qwK7$pNtMfqKNZt8gGYd$pw==",
        "#=qEoM$dAPD9j9L1YOZU2B97iwm0vZOJe13LDB3GayWQEo=",
        "#=qZ79zrlLw6T9kJCHt$e306HkmYpQl8J1ugf3bmy8tycE=",
        "#=qKoyC_0Y6bPLCPvDcJr2y5A==",
        "set_Verb",
        "Ir]$T",
        "FromBinary",
        "#=qwSPuuWVW8tz$gDazhda2d$myXXX0Ro_wRP7Rmm8JiiT9wA1EeeaPUV2jnUkQOCHa",
        "1M2/a",
        "#=qiIt1yNcUYn9ksB4loCZmUQ==",
        "<v7F:",
        "GetUnderlyingType",
        "-$& ,'",
        "-p&~C",
        ",@&(\\",
        "#=qwdHHpd7UWv1_2lcOeunA18XKUsrG9D8S$xli$tkAMlI=",
        "#=qp7rlpRCprgGh7RCnHteaLw==",
        "#=qU1g6m1CiJ5yzLECox1hBrw==",
        "+u^Di?",
        "#=qkrqC_kLD0I$zOgfqD$aGaA==",
        "ToInteger",
        "#=qaCmGqb7phy5lq$DAzhK3vB71XCZSvhKm3BtGKq_xBto=",
        "CompilerGeneratedAttribute",
        "#=qXfm3QhQkyfcZgbFdAZgHHmadm7n1N0mfKcKBqrdfAk4=",
        "#=q5v5cLSMFBaxiTtOEjscx86gN2ozXlfytiL6UmXnyWtg=",
        "8 @=,4",
        "#=qzB1OZ89gRpxcPckUn_afNY2d0beSpEyl40_4IarIxzM=",
        "RijndaelManaged",
        "#=qgSHqO_KLHRARFg70SGn_Mw==",
        "0D2T)",
        "2F]QS",
        "#=qDx8yS5wU6EQSawGC841xnw==",
        "SetValue",
        "#=qJe4Aop6J2k_bK0f$hS3ZOQ==",
        "LingerOption",
        "WindowsIdentity",
        "#=q4KMIX0AcXAdYuUiSKvyy9Q==",
        "aLk|W",
        "DeleteValue",
        "#=qbOmsEb0zGpdZukI0D4Idug==",
        "#=q23tIFHA2cbwzlg6YDYhwLkXCJGgIhllZCGmc4pRC8rI=",
        "#=q1uJdtbJoEKhZjOld7SeHjw==",
        "#=q4N2IYJkFi2VWiCVDKVND$8gixU$DXUcX8F2LiLBxLHw=",
        "9'imFT",
        "#=qzjMBSDJWeEdkUWCBxYatrQ==",
        "\"N$9#",
        "#=qza7O1AHrroJC7yRIJz4wINR_Sgo4hDpQrj_OYfIrlJE=",
        "#=qb$tFKVReqZMI9M678cKWGdlE1UJqJBfHAfOfQhXuW5c=",
        "v2.0.50727",
        "BlockCopy",
        "#Strings",
        "afeffeefeffe",
        "System.Collections.Generic",
        "#=qZaN94n8dM6tBEf$qCdY2kbTZb5BOW8Z134$2tNv7EJs=",
        "\"G>g{n",
        "Bu=V&",
        "~v]_yWs",
        "#=q2dXdGRU_h62YVIUhgXBQJzEnralpXNvp017RQs19jjo=",
        "Replace",
        "#=q$XurN5kwCvUuDGDncP4myluEGVmoB5AfvTb_Ct0PT5c=",
        "*LD\\!",
        "#=qWcYPgOJASLG6mRBDPhOIZERKO3Eig2IiEWCrUa$w_Mw=",
        "set_Item",
        "#=qCgU$tDqtOAyz2b$RwfSF7UzBcCAr0rFJWxm16x7Lre0=",
        "#=qTfMnD_jfiITiB95ES2nWdLlDTdGOSDVgXEnjKNGkWcM=",
        "#=qxb6WVOMh6wjcZFY_Q0MJOQ==",
        "EndOfStreamException",
        "ToBinary",
        "#=qUWYBucdXrqr2Ksc_3qKZcA==",
        "]a|1QD<",
        "#=q97ilq24aAenhk$hG8MzEMQ==",
        "BuildingHostCache",
        "DirectoryInfo",
        "Lq0M%sE",
        "#=q8r1xTCj7grAlhMxU0cmrbA==",
        "value__",
        "bEpVvV",
        "#=qFv$qWif57TCUNsu_O3F3gA==",
        "#=qSYke1CBEgOP5WhDQ2wCOhA==",
        "SuppressIldasmAttribute",
        "CommandType",
        "#=qTSoRMaNGYiiBNK9Yfq59T$2z3sNScYh9uxoeWlhnD_A=",
        "get_Hash",
        "UIntPtr",
        "#=qJY6uBmA7bjB3pfI3CAMZ7w==",
        "GetFrame",
        "#=q8Lz$o21atQxw0qUwF07ufqfk8jjJrspNc$L9E2y_kjQA$2GQzuj5BmjDMXRcd0oL",
        "#=qkcPDXy2$GrSLn1ykhNxS$A==",
        "#=qLJcloNvItceT7R54Ssv5HVCoj0j2JUUq_dQXQpFZZjM=",
        "#=qafzQcMCK0eVSctI0IcD2PA==",
        "#=q5W7RemVArrFCeEyFuvU4Hg==",
        "MoveNext",
        "UInt32",
        "#=qV4bSY95FY8CPz8U7EzzkRg==",
        "#=qUaHlQloQ1heHsricyshXiA==",
        "#=qYVgYkiAmhdTmisXUMVHYlJUHzcBdggj3Sn3nLI_MDJ4=",
        "JqQM!",
        "#=qulZN_JfMbEqc2jFbEooALI6mh8tLy9$3NFedHEXAIAw=",
        "Gv1\\y",
        "Assembly",
        "G')UL",
        "#=qUbRtqAPcSxRMI51YgNXGZ9omJvV5BvuqBNocgi7xl6Q=",
        "#=qrIbbxniIme2qLTdRw6i0wDoZFMH5BWs03iMeSnjojQU=",
        "Z118N",
        "System.Reflection",
        "2XgO\"P",
        "#=qAoRzrFi9HiHjyPL0ixkVXA==",
        "#=q0QKFCbf0u_IpV5ISOWOl$Q==",
        "#=qr5qpvOPnLxLp6aGkfAM7wQ==",
        "WriteBlockData",
        "#=qIZP8IX60gSYF82kuZejmg8pOoXfEBczapTTwgrWM$fM=",
        "#=qrjPq4iPb$PLckcObsgRE1Q==",
        "#=qH7CAcg5aycQv61Wo62XDpw==",
        "DebuggerStepThroughAttribute",
        "#=qejgvNXJQvgM2GomZsygLjreyguSPQ29pQHqjR_a0dWk=",
        "#=qJrzYsTPKAwT$ubz_aq99mw==",
        "Int64",
        "#=qtBt$1AtaHrrce6fc6LOT3axuBNxZ$SQPty78qYGi1os=",
        "#=qfjs2lYYPRWKuXjeHrc8Rtg==",
        "#=qbUu2Y2P9FL2iRkWyb62gww==",
        "GetCustomAttributes",
        "#=qul8YRvQj1pWpo4_UxgOSzOBvtncEE$VPCzTeLK_rIz4EnXxineVkwF$lTxruKPxr",
        "IntPtr",
        "#=q91nKS7P$i0qKCqvUAPW9EQ==",
        "(K(s2+O",
        "#=qos7yzAcb5jR$ypc0Qk3OWQ==",
        "#=qw9FR63zXVj$omVnwg0u37A==",
        "ReadUInt64",
        "#=q$Rh_ulnlhN$9Zn9n4fKAsvWT9cisaHT_PgvcGANnd6o=",
        "w,m~+",
        "&&*}#",
        "#=qiCTCgJQkyH_Kzq$FT43G4Q==",
        "#=qCeJ_QwVb__fbuEImkTXwSg==",
        "#=qURIxMOG0HImwEP4A6zEiPg==",
        "#=qxQTn_t1ZFKKNm77mQ5vH9cInicm2Cv9jGtv9vmIpksI=",
        "#=qQLqXliLS$ujl108DGV7$zv9jo8WyYr7oxBJvAgzllyk=",
        "GetExecutingAssembly",
        "#=qqIzVXHiNuUY4ZNiSxkqEGQ==",
        "GetTempFileName",
        "_Lambda$__5",
        "#=qEnv9WsExz6baZJKRUDupw9eEQbgJVjj69NjcsJ7hrBk=",
        "uTL=\"r7",
        "#=q6pErmyx6x4$YkotXXEXGCt_ysi5JdNm1fpNgnUvZ9LE6EtA8E0TapqXrPnqyBO1x",
        "#=qr6ouJTA2RwDm_3Z$eUP6TCvbpSA$yAFGnut7D4kG2$I=",
        "#=qjM89gxwDLZ9izFxrYPCtcA==",
        "wUFU\\",
        "EditorBrowsableAttribute",
        "#=q_XA5h2lVGHLcY9dK754wKGrOjAm6aBbwPxcUJXgJThJUz83kMbCL53G5uuOLP6Rq",
        "get_Offset",
        "#=qyxpfolLUhMvFTDE2h_syvQ==",
        "GtXAv",
        "#=qAp_zHqT7acjq$QNiBoq2EA==",
        "t]0R#",
        "#=q0msvLo3fKjQ5ucIFxkdur24Cc0tFDGimgcqgtAeKZq8=",
        "/%RQy",
        "#=q2nHH3haw3R0VWVw4qHOwKw==",
        "ConnectionStateChanged",
        "#=qRxKU0X3UfYwXoOTtDpEVW6z4XRgE1s4V5zOQsfCCSqM=",
        "RegistryKey",
        "8gxrZ",
        "#=qwogjI4gN1imp1VeWLroXTk41PgYeLQ34zunh6NYu_3g=",
        "MyTemplate",
        "#=qm5VvJvLZD$UcnjvypC5XcA==",
        "#=qtWaDSiZ3KDHpQtSfxDZV0w==",
        "e>!q9",
        "#=qbpvfREN3OwaXBj6J3WBAim$AQyJ99fz1ef01qn6kVrs=",
        "#=qTEC8gcgkt672qW159Oe_Iw==",
        "StartsWith",
        "Rectangle",
        "#=qwNkTTorgPauZQTT6jiqLIA==",
        "System.IO",
        "get_ExecutablePath",
        "#=q$c3lXLbhl3Qzil6Z9hYEopCTRdsG8WE_1ZuhF2KQELQ=",
        "#=qm_Podb$DJ6CfxMwMnaj6heXfc210URbSx7p$rJGFPmA=",
        "GetFiles",
        "#=qay$wDBdxvh$MBWrC9YMhC_f55kIvkv7I_BjPu_7Ajsw=",
        "#=q8NzetUGGc1cM4ZGyRGGlug$fKAOwmcPqe4nFzDGKLk0=",
        "ReadInt32",
        "Y=)Bb{ ?Y",
        "Remove",
        "#=qTAs57ZkYafcLC2FZLCGAiQ==",
        "K*$ T",
        "get_DeclaringType",
        "ExceptionData",
        "Format",
        "#=qvX$J24rI0eJ0gWfA6CEdzVJN7bQN_YTuS98N0yyMYPo=",
        "#=qLKYxZZVHP8wT4ocBxnjPXg==",
        "#=qTLmFjOt1Rq5$fqQEFVZ2zg==",
        ":9 y`D",
        "#=q3S7bY847GmpPliI1m7tZaAVifJNdeHclZJyeY2JTxN8=",
        "ArgumentException",
        "#=qWQUgmvsTzj15wSjWQHZnng==",
        "RNUt#",
        "gXtD[",
        "AssemblyCompanyAttribute",
        "#=qfvzoVBS4j9KdxyngOlL_NauqVYLAaOZVw9dutKQSAp4=",
        "_Lambda$__4",
        "#=qO7YVPb8fjfyGw81pHcJjnw==",
        "mYMn|",
        "GetPublicKeyToken",
        "=KTe8",
        "#=q1A7nXYgjUuxh_0aV4fZMB87On7HuSdbeS8x$mfXfW2c=",
        "#=qIFfr$DrKqIieRc688$vylAlBsEnx9Z3$TxvrDsPURfM=",
        "|W[bO",
        "CreateEncryptor",
        "8{=|y,I",
        "#=q5OunwTi_tYTGCTkAtZ8rARxlhmXbFcAf_e1GiEt$FEA=",
        "#=qhWn12I_bGxHfrIrnto3QAA==",
        "IClientAppHost",
        "#=qWgd5i$rED0nEbfExDCteKBL09U6dKm2BW1AXqZVXCWk=",
        "#=qjlBNihUiUO2oBJbOEbdB4u8xmfTL9EQ3AEFa$nrdzJY=",
        "#=qoTGj8$mBoje$u1RSJ6obYA==",
        "ReadPacket",
        "-#&~7",
        "Int16",
        "WaitCallback",
        "#=qlIUFl2SBYSRov3A1WGimWQ==",
        "#=qVEEdpD96A48uRzPJT7G_w60gIZo4tH1_e21GoRWPFm8=",
        "#=qChPTKc$8xcHrcle7anHYNe0wH_TweGkex2nGe9n8WDs=",
        "n*kWBzj",
        "#=q8uMGC19QD5WGzpkzUOu0SQ==",
        "12BT{y",
        "Disconnect",
        "PluginCommand",
        "AssemblyTitleAttribute",
        "z~$TI",
        "#=qXO4A8$YrN_OoPhFOn$Hhtg==",
        "3aHsY3",
        "Dictionary`2",
        "#=qLSPQZXlXixhGX8Gd10$ph8j0p3_XdW2xwrfqz3nO7MY=",
        "#=qDJlWEiuGwuVXAz8yc8z7OaMssRYN4hP9AHespNOmdYHus6_1XkNOC0rqgHeRZksg",
        "#=qhwyNa_lhtuoyuJK5j3BcF4xu5fY5XhFlgzkM1Cgy6IA=",
        "Dispose",
        "B.rsrc",
        "TimerCallback",
        "#=qzRf5_jFnPo03SqY9Fq$uTg==",
        "Queue`1",
        "Shutdown",
        "XZjjn0e",
        "#=qhiSO75CpxncaWptyc0vAMQ==",
        "#=qrPQtMswclvOlK1AxL1S4K8M$owLGUpQfjJA8CWW$fj1az7m8LFibY8IeMxHKi4wi",
        "ProcessWindowStyle",
        "&&*}b",
        "xL;ssv",
        "#=qFZ8xm69Cd0C55Ip2ORf7Ng==",
        "-b&(?",
        "#=quFACL_$e$cUEIexpzPXS7w==",
        "/voo:",
        "#=qedcCJsW_6aMZb5lO3tR01A==",
        "#=qraB64nHTnRXCE4d7ffs5aGExarxpEh0COAPaEFI5iV8=",
        "get_CurrentDirectory",
        "#=q5XjI6hZlPIrXq2h2btB_pVJgDh_o3RXkWrFCxLCG1E0=",
        "#=q_$JrmDHg2uq9s8cQVRi8Jw==",
        "ReadBytes",
        "#=qJqkjp9g96yoxpNS2E$BC00FKleto7dZfN9N5mtLDF4g=",
        "#=qszlIp3ITaFi0VCgRIaErNg==",
        "GetBinaryForm",
        "Yaa*&+",
        "get_Y",
        "#=q7rZvZ5LmWDFo52hBeGb87g==",
        "#=q3LvM$oW1poDdLKDT_N_s4w==",
        "ToCharArray",
        "RegCloseKey",
        "#=quOBOxPeAl_kjKKx$REI6dA==",
        "#=q_NLac$XJ5lIxZMpXsr_nBw==",
        "#=qOplsUBML8x2xteEBilOycw==",
        "#=q8Bp27fhtrXMmonNxf$9qLbuQQehIBQTdOPDQw07FUyI=",
        "#=qFMsFc_zvkhu_B2YTPJt9Yux7Vq8aZNOr3FA$mEdAzCc=",
        "\\;-_b",
        "#=qxJg7RxTW1v5mnt12xXeJiYJv_bcctbtL2BCD5MjDi45Hlz6t8vwDNTv1Rv7tgIct",
        "AL7M[MM",
        "get_InnerException",
        "#=qgCcrNFC0iLB8hKTy5iNnsw==",
        "Marshal",
        "#=q3cm0QwDyNYr2y$xvkCk9bGbohRfuMuxkahGwLy466GA=",
        "#=qyzEuYsQ6u9hwZeR0HeWqvA==",
        "#=qf3c4WtE$$thN5QyBMvo3u0lth2VF5hmfUsIv1r8yRkg=",
        "j:.M*F",
        "#=qcDgE7pmQv6niirKxFRMj7Q==",
        "SetKernelObjectSecurity",
        "9+,Yf",
        "WindowsBuiltInRole",
        "#=q4d$NdpGCMcL3TaMlT9EW69FacIvNnqDPMFNisgGhmsY=",
        "GetKernelObjectSecurity",
        "ValidateBlock",
        "A3Q3g",
        "#=qRbDxNN_CBpjdn11hjtWoZg==",
        "_'5-_",
        "#=qe9p_PgOCiouYWahOSDKth00dr9CdsTb1R3DYgCeLUBw=",
        "#=qsYpthruwyrknxFdWaNp9Vw==",
        "CreateDecryptor",
        "W;Est*",
        "Conversions",
        "ReadDouble",
        "#=qdzx0nDkNduYsJ$MOZBFb6jelzyvbyiG7So1vqpZnVLU=",
        "-'&~C",
        "#=qCN8q7dxuBuds3rgIjZ1oLA==",
        "#=qBcRYABJptno3$fpXoMXAvg==",
        "#=qArVl3RpI3eEiVf0qXoqrWw==",
        "#=qk77uxMCXAcR_2KMKgZiSng==",
        "#=qd7oUKLFPI9nt8Ln7RU53xA==",
        "CheckForSyncLockOnValueType",
        "#=qCKX0qzAtjLAL9KBPrJWkOA==",
        "#=qXzNbY0aXEU2Rr2_Jbe87og==",
        "ThreadExceptionEventArgs",
        "get_InvokeRequired",
        "#=qu1CivWngdicjZHEJYKM3dA==",
        "#=qqLLpPwpASXA1wqOuY2RNlU8CTc57bQGBfHWaLDgrCKM=",
        "AssemblyFileVersionAttribute",
        "System.Threading",
        "set_CreateNoWindow",
        "#=q9rN$wEdl9rzJbAMMIiemCg==",
        "#=qqs1moO$mYaS72OXOWe0Z6GycslEb6e9Ipoy7ppW0O5abIp05ajv8doqdJZHlN3cK",
        "GetBlockHash",
        "#=qdy_NHDvN7XTcQtWWMYxYKbuJqtXHsYJXM_YUEvVR0bc=",
        "#=qyZOtLxFf9zA2x1ff4_5cOg==",
        "q]`sp",
        "Write",
        "#=qxUvHfLZKZiUmPXUqPV8Vcw==",
        "#=qsAejPkl5V6B3npq6homyUA==",
        "Microsoft.VisualBasic",
        "AppDomain",
        "#=q$bBbU_xpGfMMkAvp45SBRg==",
        "!G,iU",
        "&Z;1()",
        "#=qZiHVbt3FXowK6_NIyOxsOw==",
        "#=qsA8D04owIGYHILF6yPa43A==",
        "#=qtT$P2Bo4VHFu60OU4VLf1H20c7M2DlURuyfb_XJDYaM=",
        "#=qstAyOBsDsJqFRKDvXIn01A==",
        "#=qWljP9Wu9miiHAG26c_L7NQ==",
        "T D #",
        "#@\"E<!",
        "#=qGqLDylJy8NmMEbMDJmKtoQ==",
        "#=qvLrEXVjSw17e3P6GFPALhrZXcKcfxuk0NupQhKFf0VM=",
        "#=qFlM8LWSzwV9qMKMd32mVdQ==",
        "QueryDosDevice",
        "AppendLine",
        "#=qkWUjAoA_6r2E7qo6NAGuIBq3iKikqBJbioTC25CcZQY=",
        "#=q2wxuRKC7TyzyevfrmeuJ$w==",
        "#=qZFVU$VkNPSWYii2AVQe6c6mwAUd10Tgqkl1$K5gZz9Y=",
        "#=q63A3zH9hQ$3c53x2wqU0Qg==",
        "#=qEqBb19ZxrWpMC8pwAc1v$Q==",
        "Hashtable",
        "#=qFYv4oSsEFno3Ujev9_o4Hg==",
        "#=q6Xi08r0$lOOnXtoBHhfMuQ==",
        "#=qfOXLv$ej4ffVoa9QN8Vke8O9DCKhSHEsi_sqFk8Qf0o=",
        "get_Day",
        "AceFlags",
        "MessageBox",
        "ToUpper",
        "#=qVXB_y3eN_sp1$Md9UoJeYQ==",
        "System.Drawing",
        "#=q6uR3lWd6_aD2reKUDlx$OA==",
        "#=qEIPcndOLrV2GJmno7zKtBA==",
        "Details",
        "ExceptionHash",
        "#=q8T1neNU8Flp1WaNsBKnRHQ==",
        "#=qfPf03rjJVGFkLtYSr7zDRw==",
        "#=qUUt$Zm9DEy7746wMpw0nOgKcClljRPRKWyhQ21GyaOQ=",
        "#=q2X26s_rFZ25AY$hOcf_6zA==",
        "StringComparison",
        "#=q9heLrZy3cpWSk7do8VVthg==",
        "}48{w",
        "#=q8McCIarwH$XScVz0xkTmJw==",
        "Combine",
        "#=qBhG6LJNfmJspOR5A5YrkZB3a_dWOpJYSj4Mo9vfL8qo=",
        "Create__Instance__",
        "|,RA/",
        "er|E0.a",
        "-'&oN",
        "#=qDOdV5duF980CDFSFl8oQpw==",
        "ReadString",
        "Client",
        "Object",
        "#=qe5qrWacQXGv9g0P5D_mRuQ==",
        "#=qluYNp43cwlAh9yLdLZolDw==",
        "#=q6Aboe3ONIkez7GgqcdWPi0_vrT_i53_89HUeagGM6MThXvFkvl8hpSeHO1UJawKN",
        "get_Message",
        "fefefeffea",
        "`jf|*B",
        "#=qe0mY$R_rBsPIZZv3hPLS4g==",
        "-O&~r",
        "F)&*f",
        "#=qKYm_FHWoJ42y$VrakLgWfw==",
        "V/FBx",
        "FindResourceEx",
        "Concat",
        "SocketError",
        "get_Unicode",
        "#=q2gthvB62n07fYVTx5fwIqxBAo1t_hs$il9Ac$4FY_Gw=",
        "GetInterfaces",
        "#=qYMGXxffne_DlG2tyCliUw119RPUt2rJt6SWle_TPkBA=",
        "#=qCgskv3QU4cEy8M7hqvNNBbFyow$DvbmSQrN8A5JJJWs=",
        "#=qgB3pFGrOVxm7f$sXZD67nQ==",
        "#=qQRAhbbFlVBfqrgso8zehPg==",
        "#=q3_xjz98EYRXgLslROl8imQ==",
        "#=qmuy0ee0GJl13ksvWRbOSbofOCTPf0dv0HYdjJq9H_Es=",
        "W3cuP",
        "GN%UI'?",
        "OperatingSystem",
        "#=qnY1InNbQmfgiJXdGVH6rvQ==",
        ")]}8$j7",
        "#=qYI$MiBdzcplbf7GqrUf7Ig==",
        "fefefeffe(",
        "#=qyEH54IW$f9fUJb7FOR8r3vj6e$onLGrpm2VGycjbl9TZJEqkwtA4y4bL9ExOWpiA",
        "#=qMWVV4JCreo65oWvwYJqZWobqlgJkr$K2AUIqF$weF5s=",
        "MethodBase",
        "#=qw39MYiiaN1XJbqsDq$LgQw==",
        "-\\&~]",
        "#=qg9gWuHgvaa6cHg9wj9NSQQ==",
        "#=qr9m9EjuYAP$2E3p2xadfFhcTH6toAhrm0dlfOTldiWRsdXd8UmnkRkYrV_8$1gaA",
        "#Blob",
        "#=qzTUdhpx_l8oNrXik8Q6a51kZkIp$waiEMbjMOU1bFOc=",
        "#=qABSlSWKh$8sT$UF4sG_vQMmKqh5lDRXHlL1yCp0W8x0=",
        "#=qw2XWrJCQCyTO0Iwdbz8TWw==",
        "AddRange",
        "#=qQ3JMSE9km3mGmL6lmUfRHw==",
        "B%S:0",
        "#=qEQtWieYw8BPdEE4hbsjTLrq$BwGjJOBoaDYJmV9xVgE=",
        "#=qtIl3MhjXHsnCHvTVFi9hFg==",
        "#=qfozjXlIKX6LyHHXB6wCG9g==",
        "#=qjIje6jGWLd2EOkfZXKqBbg==",
        "AddHostEntry",
        "&&*}X",
        "#=qKdZKgyAqL_iP0GUSJkXePw==",
        "ffeefeffeefhah",
        "LoadResource",
        "get_IsDisposed",
        "#=qeKiN0Pwa0MwkK0uB$Ook97TrMQC$LNj1jgF6xTuSA2g=",
        "add_UnhandledException",
        "#=q637XAKKKpMW09u9r97v4lg==",
        "#=qwGMLoIBYlotM6E$y2KTAuQ==",
        ".(oGu",
        "2#cKX",
        "#=qeeDSInMnFASKK3QXGIKUxuxDb8FgGi0XLXRlZ2oJdWM=",
        "WellKnownSidType",
        "get_Port",
        "GetMethod",
        "$IqT4x",
        "#=qehEpCuPIxZRbHczlt$dAWi4yWi9o1_noSvuo$Wzvtyo=",
        "#=q0REOJwjO1qsE01G_RQE1TQ==",
        "EndInvoke",
        "#=qPNzwB3EyeKwH$TwKjEdAjAC6A3IlGhANCdkUFCgvEiw=",
        "#=qpXfSNxR7J3tqOHyqT6s_Aw==",
        "#=qNz_Hz8DMWPqA8pVcg8d0UVymwvCurvyYgdZaMK3OhQE=",
        "#=q0PMcXQJxcLLr1sYO0fpyhPjUwjQtInL_vJPQSgCsfio=",
        "#=qO$LkcjIVULy0PGjvpOiiEw==",
        "#=qyc0YQPNqWwZHkgNDV8lyIQfgMkEbGZtyDsLzhYmFp8w=",
        "#=qhFV5jkshUI$uRxypI6oecQ==",
        "#=q0pfW5T3uO1I6LyXSPFW7Qw==",
        "#=qQ_BBkbckkXGbXV1nE4Sw4w==",
        "#=qYiXVlu3YVR5erIxfIIBHo1Gv4y4z4vrtnS$$9CALbVE=",
        "#=qhq3FXVXLOItNPwDlpFnTKHk3JkInaJiiSE3uR3jtGH8=",
        "sZjGi",
        "#=q1AWpt7Zq4Tx0wGx4hVFZRg==",
        "#=qhg8oaKg1xx$HC$DKnlbXQpibwH2HXqMGSlGv30vEUsU=",
        "#=q66hvvPDVbMv$MYStXtnb6Q==",
        "_CorExeMain",
        "get_ParameterType",
        "#=q__Bys7JTXmAiG9F9QC$wjw==",
        "Ec-D+",
        "get_Position",
        "#=q51SFR_Fbl10nUMKjGTtHqA==",
        "#=q3TG8MLoZf1Y44PREVW$6m76IGmuYE_BOhC_OTjkQJFtYWwRtSeFqevP9hiteuLfz",
        "I=VOEQ",
        "A%CdJ",
        "{uT,;",
        "#=qmbdg4P9$2ouafwS8nEs4lA==",
        "#=qudwGeEjJDUB9pt$_k0YOgc30ZWMo1bIGmdknk40OWog=",
        "fefeffefefea",
        "#=qH8FTQLBlM6o0t6zf8SLPUg==",
        "CreateDirectory",
        "#=q8SIEDcn4WoT9RcZmFK9tzQ==",
        "Rk%S(V",
        "#=q_FL69pQf17BUSAFbWYu1SStMAbdu$R1GJ8VY8UL5_EA=",
        "#=q1jj2Lo3UBKUZkdI2bLcg4QlXuNGNWZ$CYnK9VTZNEsA=",
        "#=q8nWzev5go3NKhN5Gk9NzTmM91eKwrK00n3U6GWmH8Kc=",
        "#=qjYgYU6Lnx_W1ikVtBmjm3w==",
        "&&*}&",
        "ELix/",
        "RuntimeHelpers",
        "LocalMachine",
        "7S{$I",
        "IClientReadOnlyNameObjectCollection",
        "StreamWriter",
        "#=qGqugi8s64S3wxXEod1SSyA==",
        "WaitForExit",
        "#=qV9UIxiLyaOi7XoTx2DUJwr8Ior26OirSZwM3mOvftrw=",
        "(L^%a",
        "#=quO7UmvJ4RBuIIChSn0jx_M$HL4rBuRuRZnNBEMlpsJw=",
        "#=qxWNhTH3aUmlSLTvydVoCIQ==",
        "Boolean",
        "#=q4P_5NYDHZX9MPbDZuNFOAbRpAmJ2c_TFz8M5ulhIFApTRNfzn3_E1__1$MVw8$WV",
        "get_Major",
        "#=qa9HOmSrK7mjt1ZxVRncCgFoJUA6N3DmB1Rc$YUfcSKM=",
        "#=qN1bIi$08taNozgdgDWdXVA==",
        "L6&.x'-b\\",
        "S8>G[r",
        "#=qAM4ZJ3aDwBm_a3IkqHxLmjdKzHIQbFeE9thLHux2o6g=",
        ";W;dP",
        "HostData",
        "ControlFlags",
        "#=qdZqWoaYN68rlMOX4HkTLdA==",
        "#=qru2ORBLxmt_CUDya_FEQGA==",
        "AssemblyDescriptionAttribute",
        "#=qxWp4ETQRrgcfPChnmxhivyMmb5p6MuyluC9Tc_Mhkec=",
        "fefefeffeXa",
        "#=qVQoZlgR59_v4NYIa4CBPQw==",
        "#=qVHGoZQC06Wdz1fJDKkoeiKu9aci51znqNtMz8dGZQMQ=",
        "get_LastOperation",
        "lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet",
        "-(&s8",
        "ReadByte",
        "#=q1tLM5Gk001IDETj3RhJ2ESaIo2XgaV2vMWhqISqSHy8=",
        "B/ (h",
        "#=qRxR4aJg8TX8oM$OpeoviZQ==",
        "#=q2V8VN1ZqnXOBhkZZr6w3VA==",
        "ReadSingle",
        "#=qOxeV7mwtJT4AH3HtBqNUXw==",
        "set_IV",
        "#=qzx697Szk1moqO$yUynaioQ==",
        "#=q2XZFEYqbf67s$PRf9Xyx7Q==",
        "*jWtr>g",
        "#=q1abXKhVCyzVldE9ra9z81A==",
        "#=qgHxgiBgB0FhzEGOOs2Dqnfh3XnJ7nEmajCNqRqFR3Fg=",
        "Yn8fR",
        "ValidateSource",
        "t!\\4=",
        "#=qA1_qolTI9aVdwnEde3ubqM6zKBigTZiyb5_iHpeZQDI=",
        "#=q3fzZpU7POi9yYKua762KimE0tXDV2VRrjyJcPuwXgTs=",
        "#=qxp6ct4JGLaMDbwg6fkrIEw==",
        "#=qCA$7lFkUlfYTBh0Hp6uY4w==",
        "op_Equality",
        "ClientLoaderForm.resources",
        "/:?MJ",
        "fML2;s.",
        "-!& 4'",
        "#=qRLk0VFphuSTh16H1MGZUv_HwKU6b1$OQZ0l10zUjPKU=",
        "#=qbbSw65PC$nto6DJiWxTawg==",
        "MyGroupCollectionAttribute",
        "#=qA5pFz5LZPgfUa5zon4beRA==",
        "Ev\"7V",
        "ParamArrayAttribute",
        "d|x0_^UV",
        "<generated method>)",
        "HrDOu",
        "SU+oS1}<",
        "get_UTF8",
        "ToString",
        "#=q1t2nN1p2nWkytA1wjQ32JyClWcTGIZMOEV9XOIYf1xQ=",
        "GetHostEntry",
        "`.reloc",
        "#=qoKFLFqm7bb3VWsU2QKXIQ4_6anGbTCWiZAfrNlgq8fc=",
        "#=qLYpbsprg$ymVLeNEwEpYlA==",
        "#=qG2DPieaEKCS$j6T6yTf$qg==",
        "&&*}(",
        "&&*}e",
        "#=qSyCMza09ItB79lrZlFBuQQ==",
        "#=q$mqGRbJ2J2TNgadoLHYnIQ==",
        "-m,Ol",
        "#=q9tI5WfBIFIPW_84mZnHV05cJ9fSyOCl9wA8lwPxs3PQ=",
        "NfefeffeefY",
        "WriteAllBytes",
        "#=q$XxqrIH7dyYqacMzR_CjGA5JAR0vUKiq1f0DFqS1mcI=",
        "add_FormClosing",
        "#=q0g2hVR4CYkiIvLHeQL6tUkW2KQhRibG1DIo1pReSOj8=",
        "ParameterInfo",
        "#=qWbDVCvJRlY$nWsVAToK13K8LD9gZFcJQAtBUvjDEcyo=",
        "cU1rK",
        "SByte",
        "#=qQ9gevS7b4oTsdxtV36c3$A==",
        "#=qrWKlHKCxTKueolOR4ohc7D_cBhjLv1zNIcftgcigaGU=",
        "#=qKxL6kQaUyB_6jIG3mQUGOw==",
        "ReadChar",
        "<%h`:",
        "Start",
        "#=qEbf5uxiH92v$7mL0TnmsnA==",
        "#=qvJ_V3lJRnVEW6EI74n63zg==",
        "#=qFxElXT3T_$sB_0gpbmQGIA==",
        "#=q7wsNZ$btlm7uRzkYXMkJl8JrBCKSYJt4if2WiKQrObs=",
        "#=qYGU8a5KOsYzqpvljkWGWKuQS9mZuJYQa$8g5J6c9rho=",
        "7Np`=&",
        "#=qxRbSDXwo6eARhpCjqJa2Fg==",
        "#=qEn9Mtg$AIqWbq3whj1y5N12e3KXi_NwIIcl2i$FXNSk=",
        "SocketAsyncEventArgs",
        "ConnectionFailed",
        "get_Exception",
        "0*%iT",
        "System.Net.Sockets",
        "#=qOn6YhA2JjwnYZ_7D0fnnEw==",
        ";}6g-",
        "#=qu0EIqDRT_HlTe4PqaMKdozL1lQ0SgTtqFucuF2vFq50=",
        "~utVN",
        "#=qI5Vms5JVXaVkwalJFV3L6w==",
        "SetLength",
        "#=qAySeqCaPs9tWWTa_P8M4Zg==",
        "-l&~s",
        "#=q6Ct3QmvVLFC7my$dL1uEiHGmXJ5qCuK4WIhDwfhPTFs=",
        "#=qtcncUaS1HcVKUD5AEGHBokWqEL$GDDjoAu8asy_oLis=",
        "ffefeeffe",
        "ffefeefeffe",
        "#=qEDU5bqS$T9T0k2xHaznuPTNI8j4z6II52ItUe0wjyZ4=",
        "#=qXCoQdguduOewiATPKLDvyekx3X3r68VNkZOPBX9O5lY=",
        "#=qvJN63xerlaB42Q0XUG621g==",
        "Decrement",
        "PluginUninstalling",
        ")a3O)",
        "#=qwnMPoJqYBxCKR$s5x3I3EQ==",
        "#=q$sTc1AZMnHRC7q_PL2hWs4JIEJoo88_IAFcWtrdNt$4=",
        "T\"({Qls",
        "feffefefeY",
        "DeLGJ",
        "#=q00kXQ$0a$SV9DIgRtf4NWQ==",
        "SocketType",
        "#=qdw5QBoXX8FR0LrkjhWN3qw==",
        "ReadUInt32",
        "#=q1ZcUbkVKv7wahbk_Am8y6A==",
        "#=qJ2Bo_iSk1Tt7sQHk7C2ESQ==",
        "System.Windows.Forms",
        "#=q0zLeEY98tybLc8FS6iVEWjGp4MNZxETphcH7ohzBXuY=",
        "#=q7O26Wc9N845khaV1IlgZGg==",
        "#=q7Tql80HUgCLaL3e0n4j7ew==",
        "#=qCSC3Khfzx9$ef45TjPThpcJgh1Y2yjEovdFzCbywzqU=",
        "[1A@%",
        "b-f.1M",
        "#=qiGEsYAsOSz$jy0hyBv5MGPdLIlePpwWMgCE_Abe_mLY=",
        "#=qHU4s4cJ8BUWy$MQH9LPGxTniDgLcWFlt1CmhZ7PNRWA=",
        "dm(Vn",
        "#=qoKX_5NDx$uDAqG3r2Qdnaw==",
        "$64}!",
        "Wj?%+",
        "-?&~]",
        "CttEg(",
        "IClientDataHost",
        "get_BuilderSettings",
        "_Lambda$__3",
        "Single",
        "#=qXjNBjXFhVcOvrRAG8alfq96_gJ4jOa0wwNOaztY3QjLWnMT6wXGDzBnHuUkef5N0",
        "CFZ5X",
        "STAThreadAttribute",
        "RegOpenKeyEx",
        "#=qX52fPnzDspvxDLERxqgnmVyN3O6kmNVEBrlqQ9OVPeE=",
        "#=qsqmAgLqQh_pOiJq5Mcf5Ii66zl6iLnAX8VtqTy$uxhY=",
        "get_Name",
        "#=q6oykuAaezoPWCQHwIFBGYQJoT_doGKMmOjpzn6ZJomA=",
        "#=qORcQ89THKgijJ1sWRyjf4hLd1g4H_sosI9t_gkVfZ7g=",
        "#=qZHoyzaJ9rjmsFI5qWuYXUQ==",
        "b='C=",
        "GetResourceString",
        "EditorBrowsableState",
        "/@I76",
        "=sG>BE",
        "S'Wr]b\\M[W",
        "#=qRUXz_3fP21juNHWjDYL16Q==",
        "#=qcyp860KJctHXULF8nCr1oMRR0y2kU8XZrQHqsInbsAM=",
        "InsertAce",
        "#=q9rPQSTp$UBZiTGc7mKlh7h1QvRgfs0p_mQAaIRjRIsQ=",
        "System.CodeDom.Compiler",
        "#=qNQZrJgmZwpZh_4yrtaf9Gg==",
        "get_ClientSettings",
        "DeleteFile",
        "G-(!}[",
        "Double",
        "GetCurrentProcess",
        "#=qU0vjurWIhbfq4$RoGXKKVfTj5MJBenZeu2wAtoCJAJY=",
        "#=qYGqPwTlQx5HSyCMpKnJtwO$bA4uyJcKD$pA6WpBamRM=",
        "#=q9M64o5ghSlB001vxhTt2kVIQeNtcHtzTvRgoYr2$PVs=",
        "#=q$JqWZLd6UPV3jmsDHksd2EmkHWISQtPlvGx8vZ7hHXE=",
        "#=qClMnNCTDhIIGUYHmdm$xCQ==",
        "Clear",
        "kZ58D",
        "GenericSecurityDescriptor",
        "#=qikOQWBxvreUKIkKm4o4DoA==",
        "#=qI2pAr92bRdzddapVaPVhbQ==",
        "cqF/u",
        "#=qHy8pXlBCL$mvAXWQDJUnVpxgTTYNWuQ4Z7NdFPUhcZs=",
        "#=qEKdoqcCD2XVb2atXAIOmL$Gnnk$r2oNLDVsEymHbxMo=",
        "#=qU_ZXXWlv_8PtJY9coDWiH8$dVbE9S$EoqFVRvxhPtE8=",
        "#=qOgcjmweVxeuvMU4cvcFOmg==",
        "#=q0qLVKF4NbQlcaunYsixITQ==",
        "ComVisibleAttribute",
        "#=qWCa2pDyuMnzTMLUOIIx_zqZ1n0nAbCh3XpyakFsKTbQ=",
        "IPHostEntry",
        "#=qFaxhQMbuEyPeOadTfKIzX7ulwKfSulnteVvHU$QDlcs=",
        "b`h*&+",
        "#=qS8syUoAGHVUW8$eQd6_3_g==",
        "set_WindowState",
        "#=qfXdNdmKHZO9pILMTQ4gUIFhfl9KPJm2rU8y_LQsTH4c=",
        "#=q7EIL8N8VWglyI984D7TGpzIPvdOcvYIRRwfMeKNyDDs=",
        "#=qgPQkZ3GBDc371jzhubcNPqmxfqhr7b78DNmenmuxGa8=",
        "#=q85afbI_HcqBFOZnC0iAqsNghLb3LsuyjFtpLEYYoPX8=",
        "ConnectDone",
        "#=qfpNcQ8IYoPRIQgVc_nBfXzVjxVN2nY_mFz$PcDXaKKw=",
        "#=qnk9x1Gmlq5UZ_X95yAl14A==",
        "#=qrpluguOr5I7WIqr51cA8ZQ==",
        "#=qeWvkoUO61qxfYbQKV$cOPQ==",
        "raGy_",
        "SetBuffer",
        "get_Height",
        "ClearProjectError",
        "#=qCSH0DtnYKogitTpLw_M85GR1jr6BVuF$16hm8cfUYWw=",
        "^YkG#C",
        "-&&~r",
        "OpenProcess",
        "#=qKqE6jaRKu5jJvHl8RwywXQDv4h_f2ISEaHK__Drdd$M=",
        "#=qR_QBxpRX$xZ1vjqVv0afDQ==",
        "#=qYuHUjnyRYHZqCkKAt0jj_9qFBzmTZKte4i1ou04eBWY=",
        "#=qAkkjpY6IHZssIsQ9hAxzTw==",
        "Invoke",
        "-T&s,",
        "#=qGHv1IOurZ6januU0XCThS7E6H0kqAtBD9d30RkoHFXM=",
        "~:}ew`",
        "#=qOsVShdMttD8jGLf8zW9G7g==",
        "#=qEWXagqzV$_PB$92aNfTAHdvK2qw2uvSxy$UVh0K_lso=",
        "ClientSettings",
        "gD];mED",
        "#=qrzlCozsOJIqLxGzoulKftCL7kUWSuMYFdc1ca_yCcBA=",
        "m<pb#",
        "#=qGjStw3GYbvUue5kapeAzmPJAl5$UDUb723PSvMiCGdU=",
        "g2pBuG",
        "#=qtLsfqPVQ47D3cdxmiwAJAQ==",
        "q9t;IK",
        "#=qnnmAgQGEsJw4dsVn9gN4wJbRL4WqsDa_V0QuBPM2E4A=",
        "get_Chars",
        "Variables",
        "ZPM:3",
        "#=qQoUfP$jAQrKMjDuqm54QmA==",
        "#=qnaTZqk95Z1a8JBLdKiF8aw==",
        "#=qwyLCYYp4MoTtTA6T$fEOIg==",
        "GetEnumerator",
        "AllocConsole",
        "!LWL)",
        "Dispose__Instance__",
        "#=q5j3wvJXlnrGmRnKUHr_1SQ==",
        "#=qyow7wBpiCNNIoap9jI9L3Q==",
        "#=qCoWHlVuoVRMkOzC7RZubJCslkxaEWn9yZiIydECf69$ktj0IPD5wAwC2H5Cc8C$L",
        "EnableVisualStyles",
        "`TC$c",
        "fefeffefeef",
        "CreatePipe",
        "it0^s",
        "get_CurrentDomain",
        "#=qo5Pv9nXCIU9X_B8SJDUR_qgp7npNK2pA1rGP0GNQ51o=",
        "#=qQJBwIjtEvP$UD5Stcfj2wASGBDPz6YiX1yXx_MSfzPs=",
        "Empty",
        "#=qTZGarPS37Dw3Z3Ipg_AFug==",
        "#=qNdKVs_XU_xYgnUK9ZfVshw==",
        "#=quXVzKqGldmgtXgVm61aLog==",
        "#=qAR9aFFQPEovpFzvfokoGkw==",
        "#=q61s8d6EIAdSsDLLjqchw1w==",
        "ffefeeffefea(",
        "#=q6CxZjTl3_v2RHWKegcqMWw==",
        "OCiQ\"dN1",
        "#=qek1Oy3FoZ8ULt6r5iL2pEQ==",
        "kernel32.dll",
        "#=qvA35ZDPTM3VgF89oJb9AmWFE4pqnIDYGjeV5H4uvblU=",
        "#=qxoz66kOqvxr21iYXZYXWiumy9eZGwFWaiX4C5X8aecU=",
        "pTn([/",
        "#=qJRbhy7_BbunS1O6hH3MqZIufpnZboV6cb5Cv4qZI1D0=",
        "MaxValue",
        ">T2p,",
        "&&*}o",
        "d;<kX",
        "get_MachineName",
        "#=qp4XZ9Ss3K04S36I$7WhtwQ==",
        "uHPLZI8",
        "l.|jy",
        "#=qMpgSfrZ_Z1PFlMpqVHDctw==",
        "X*]x.",
        "NanoCore Client.exe",
        "#=qKKh2V4W51UBGXR09J__pug==",
        "#=qmL2H5Qgs6vv79mCqS$t3qg==",
        "#=qG8K0lOrmHWfP2KExoNv$5w==",
        "3,bDD",
        "#=qUDQctXsgw3eGxqcYAxP8MQ==",
        "#=qWFUoT0l6elO8yn$hIYUL6Q==",
        "#=qhPT6K66KztLE5cE8YZMEsw==",
        "RawSecurityDescriptor",
        "#=qhz4yMg0WDLwu3BJp4fYr0w==",
        "#=qgBCfMYp3J4fCYU13EId5uw==",
        "BinaryWriter",
        "set_BlockSize",
        "#=qg$lb3t6abG6vgSpzSjJlb_$AIzqYfos5cl9DWFolUwM=",
        "#=qBeOBlH6CwHFnQdZWWBgZ_pemudZ6CfCVcfOQtgpeG$Y=",
        "#=q_gCP8hm5SSW7J$3R7xJuSA==",
        "#=qQKYqF9uhb3QdjdrkvuxjUw==",
        "urF~a",
        "LeaveDebugMode",
        "#=qXKuFJhTO9qh0nlK1iXbbSH7y8Djn0mggfIDxOoarDyE=",
        "3of*>p",
        "ComputeHash",
        "ConnectAsync",
        "#=qB7XWHK8gygwSs$Fj70FiWw==",
        "a/K6,",
        "#=qJ598Vnr_RIwGnHqFfQsYCw==",
        "set_CurrentDirectory",
        "#=qHj$POo$6pkhWHVC5cES_2g==",
        "$m`|'",
        "#=qAsEDmMyJR5b6o5oAn_4$qhqe51JCfsU9Gffe156c8UU=",
        "#=qukf_DyAYprvhLsdhT4CGuA==",
        "#=qoTZi9XCxEGJXLELWnV3yfQ==",
        "#=qDEcM8KorEdChS9luywSNQA==",
        "IClientNameObjectCollection",
        "get_StartupPath",
        "MessageBoxDefaultButton",
        "#=qkFwCVmJ2HhZ6r$uKeVZFFfVLdddj$WEInl9bSgbErDM=",
        "#=qEk42FAaXkrNIu2TP76IakA==",
        ".# G'",
        ".ctor",
        "#=q5MtzoDWNtlkksfPTHs5qXlK2k7ZehKenYzDJQrgdOII=",
        "#=qdPDxrK7XRQZlwY8QeW6oe0AEoOr3qND_WVi1o6l48tc=",
        "#=qvRKdouixzy3mopZ1VtjZRIxbtiSW2GAGLD$37iVLn9U=",
        "#=qJLXxSZzWSVDQjBBC8RxpqVbwxFaxTu3ygaLrjLvlmTw=",
        "LogClientException",
        "FyhDN",
        "#=qJAZ7is41tIXMNDQIkGLgjRC15Eis_QBrdFx8JT2Rx54=",
        "oRzq=",
        "#=qqCUKpKbVq45Cc9OUN5wTXw==",
        "'ljSt",
        "AsyncCallback",
        "#=q8GRQigucU81Rfg9VpK7PVLcjulhhYVPijYKMm9N3PJs=",
        "r[D}E",
        "<Module>",
        "#=qXz2OER2RItZOjngvYurWLQ==",
        "#=qXCUD4SfDr7DmFI64sweGXTg5Ns_ZxTOZPqBRcEKWTQk=",
        "#=qhVWucYSqOmMmp4RgG95tFA==",
        "PliMBG",
        "ClientInvokeDelegate",
        "#=qlMIFeU84lweg5Ul5iSg2vZUvNnPKw11XA1pEUQfzDeg=",
        "#=q3d9CqFPpPy$rBhZvyFIRs_ElAFMHTo4ZZuE_g$Nfrnk=",
        "IClientNetwork",
        "#=q0myQQ6i89t9SZyjYDXZrBLa9ljWEUD7zAwJyyFZowQc=",
        "#=qKY90T141DaVDQT0DHaMEr8C6aPEoolamkqMM94Ir$TE=",
        "#=qM_mpCWjOCBlruGH_QcTQHocD7LUJCLuKe8ntf2VtQlk=",
        "IsNullOrEmpty",
        "qN<|8",
        "#=qD3hoTFeBJT$SvX_fQh_aIw==",
        "#=qs202XG_JxpBwpKhptOZhRA==",
        "#=qJMNT6BwQKSi707UHw9_x7oci6egKjto_AgHYlITH34c=",
        "#=qtlZnL8mho$rv1eTFz0Mw9UYFC_yCabEZ0xtVePn6wR5aSHE7ti3UfKg2l7D0_xk8",
        "GetConstructors",
        "#=qVl3h61LTPSW_ew_st_OlTAm7x_6Xu4hQK$pi2fSiEIs=",
        "#=qSpdFO0arrQmbwA1JpPKL4TCAmwZYVDNVmpRQ6ryTPgs=",
        "Contains",
        "ThreadStaticAttribute",
        "j<}3N\\",
        "#=qEhveuZChxbRj66Cj2kCGjw==",
        "#=qIe49uN8SyHwjwKdv9N2r$A==",
        "get_Assembly",
        "GetHashCode",
        "#=qA4f0kKyGXTRnU4z03oji_RIPyVnvoC_BRjpESDLHXqY=",
        "#=qL_Q_RdUm_wJ7VeVwUqRXbA==",
        "!uE:_",
        "DESCryptoServiceProvider",
        "#=q5WjY_m3ubVFfbJuyu7GMxA==",
        "#=qrJaovDbn6146mBrhFbUMbw==",
        "MemoryStream",
        "#=qhA4OqIvVSMpJakxtoytoCw==",
        "#=qTYemjRfvVDuBO5lrz3Aq6g==",
        "#=q35mMBfMcRRKrjeZsPOCz3A==",
        "SecurityIdentifier",
        "#=q65znFg0_234nfnhL4I8yRSIMDpdjAosbzeDfyRZVW08=",
        "#=q_5hmJXim2EG1abw3Kju8nMffXDIbl5na4zXqclsRK_s=",
        "#=qAzhW8LcEnUCELlhG4klMCnw00GcHco1N61RthSA9zQU=",
        "#=qjcSlrUNMLgvZWN$58FXdrl22$0OjCpoqksNsslRtIFE=",
        "set_Visible",
        "#=qmLTtz8OEDrkzFTzYkI_Dg1dvKwiGw9blNcZSU_QqMsg=",
        "#=qi3LnKomYQ5KrkAbxbJpKCg==",
        "#=qjAD5jc_8Kg9x$NoAqFAvpA==",
        "Application",
        "RemoveValue",
        "#=qNn8WS2rooUJUoMsG84mQ7PkK4IQF8$E42cyDjfL7Kqc=",
        "*rEi/",
        "IsInRole",
        "-,& ~(",
        "s%dEUK",
        "d:Y0i",
        "#=q6TsObh1LqPbvVPPz_YjbtgEdyXL$082jRqG42$db3nw=",
        "#=qq2h0VNJ4eWuHP5LphH0mpA==",
        "#=qGWcF1$SkVAOkK9Bjc82XDg==",
        "GetManifestResourceStream",
        "5T9Mv",
        "set_UseShellExecute",
        "get_X",
        "ffeeffefehah",
        "FdlvK",
        "H(S97>Q",
        "CompressionMode",
        "#=qkzr_P52_BAWJXliKWvb8Z6oiWEishcUAemTNzwiiwkk=",
        "6$l^b",
        "#=qhYMTmNdkO7UsEcfduWinsQ==",
        "get_Value",
        "add_AssemblyResolve",
        "#=qee1h2XwRBJvy2g__X40enQ==",
        "#=qFNeaOBvMHuebCbgh$0IKkw==",
        "#=q$jOt_Qd3idEY2i2z8zIong==",
        "#=qoStPOR6UymX3IGbwW$iFxA==",
        "#=qkxH2pC1tIcRyW8E4TCtfHw==",
        "#=qecBuZmXKFD$jZa5T0d0L1w==",
        "#=qwrVB2mw7gzmYRanSJvSoPg==",
        "SymmetricAlgorithm",
        "9k% >",
        ".cctor",
        "#=qGGQk9IvbDfVOJG_jRDHqOA==",
        "GetParameters",
        "#=qhSKaq9YW4A_ja0UC7Difmw==",
        "#=qr1BSJWWt4_gjKhDM1XdrUmEEDWmH$7z1xaJvthJ97EQ=",
        "2\\PSL!",
        "#=q0yJsLo0aFpSu9ky8R9f$lw==",
        "#=qbbzTfwYbEfmovMRrVY462ipA8X_tt3oO3M_wSSE0I_A=",
        "OpenRead",
        "EventHandler`1",
        "CommonAcl",
        "System.Collections",
        "#=qW1UvUJT2hH$HRJ6kt_DhXQ==",
        "#=q3VDCpnvucWhkt3J6zytXBA==",
        "#=qo8wG17V6QHcxsU4R0xmY_Q==",
        "%2n` ",
        "5$\",q",
        "#=qjVLlQtRAzKVOtyLrw5PhiGVVmXqMJJOsTT5DxaenWCY=",
        "#=q6FX$JRP_bY_ZCQbx1UwWug==",
        "#=q7_KHECinDx5vq1IBX7p8Ow==",
        "#=qK5Mf9uxDCjwDRfyJQ6kp8A==",
        "#=qx4AWw22LafncEy7CESjbGQ==",
        "#=q1Ld$ycQpy0q1QvYRFk1k5lwgysKVR2tJyNFjakVtbYY=",
        "Wh*RJ",
        "vGUgS_",
        "#=qVVQJ$z9bl7kHgfvJohZnMPofzhiFJ4f4yMGK7Tpp6xg=",
        "#=qFWLbBQgFiIpy22HFbhF9GQ==",
        "y;j;Qq",
        "#=qmvGJ0E7$XHigSQAtHtZ6z$on2iAwFLBiFtrUR$DFhQPAtVI2LIgzNztIgPvlO9K$",
        "#=ql4R4vy5H067cy2C3KkF7Mg==",
        "DefaultMemberAttribute",
        "#=qGgXamaT7IeK3DM0oRfGI7LZg7FrEWNz8CI_5MUlFEJw=",
        "#=qo_N0HkUaMUQFRCOsgr2ciQEl_IzgJy64oQzCRnN$Qy4=",
        "/.ffefefeeffe ",
        "#=qFBEI0HItLMNpyOY0AgRxSg==",
        "KeepAlive",
        "#=q$E54nUJeqC5jURP4oCRU9g==",
        "#=qMMkhBs_8vtf4989qCM6TUw==",
        "N8[I=",
        "-|{F+!",
        "#=qUzL7S_0eXIkbwTon4AS_WA==",
        "Restart",
        "EL<s@",
        "#=q9VIijSO53lpTS2jV37$Suw==",
        "^2G&d",
        "IAsyncResult",
        "#=qxHMqkcY5ri8Rsxs7KCJ8ww==",
        "#=qv1Nmoo$HMwdd1A0cX75UdA==",
        "B##|L",
        "note!",
        "TextWriter",
        "#=q4rZJEBSRFNm6PYOH7NOLUg==",
        "#=qZbWC$V5YeersjeRitYkSUw==",
        "GetDetails",
        "P%GMJ ",
        "mwT%'",
        "#=q1t2S$ib6pQFvBWAJfG9B1Q==",
        "Rar:f",
        "4fN]6",
        "set_WorkingDirectory",
        "GuidAttribute",
        "P!|yhg",
        "#=qrEy8UTPh_zjKUNPlgJ2H5vQaVxSgPloAxSMCkFttuk8=",
        "AssemblyTrademarkAttribute",
        "#=qUlcwHJCewxIUk2tiKMDjXYc$Hb1k7TCZCyGdm6C93UA=",
        "#=qy2xCoaL3Dm6E0MYt7i8x7A==",
        "DateTime",
        "#=qh9KSqT0kHBFSDanZ7gXkKb1vdDfzZS3JIRcUnMfcljE=",
        "WGa57",
        "PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD",
        "#=q5uvtKo7rLfT5wGY5TBS4ixmbpGEL_B71rwbORlBpBKA=",
        "#=qqn0Pbku3c3j14idd7rNOJmIbi4WueHDQGNjxpToWe9w=",
        "#=qfGQBFs$OKLefNYKSta_Lbw==",
        "#=qYQagvH1k4NeWsCidwFRb$sQTZXPGouROQfmoImiPGDo=",
        "QyDyF",
        "get_Version",
        "@A[]%",
        "#=qCI9CHxEGVm3HnYdn52IpdQ==",
        "GetDirectoryName",
        "Thread",
        "#=qruARjy_8oZkz3lsHPGxBMA==",
        "#=q_ux9H7Sh7a2A98b6QB8m4w==",
        "GetAddressBytes",
        "Directory",
        "#=qgbI51haY38WJ4NumXDqnLC_uKv$aRHAyD63c9HgGYzlsFjikAASqT8RCSswEMouz",
        "IClientData",
        "#=qrcOHnfaYxPMN2$QaNhNmcA==",
        "#=q6zjWArzQ8Jv_1waqxSeP8A==",
        "#=qWFEttW6Y2i$LC7_zLCNdFCiHtPH1yR98w7TbmrS4vUE=",
        "#=qP05CRmbt2pJg10eRU50wu1vx$mfteEn$pCn9SEbehP8=",
        "SendAsync",
        "#=qaSWqhswYp72H_CatHelXxw==",
        "HideModuleNameAttribute",
        "#=qrXs2l$bWJlHMZLHncLNYyw==",
        "#=qeAiPMWOD6_wvQ4$bYsFv9GLgsem$trQFsnkw3WN9igk=",
        "GenericAce",
        "#=qs77tphQ2NXlLwCZkimhHsowpXGqSYmOGtKiGHHIs4aA=",
        "B[%3=k",
        "jz7aUP",
        "k4 dv",
        "CommonAce",
        "g<fE$t",
        "#=q8FSwXWaEOgeGW7OlBosSfg==",
        "FormClosingEventArgs",
        "-\\&(#",
        "9x}'J",
        "tL/qQH",
        "#=qY9NY2gigPsj8X4CYx0UCT2vGlqkgsq6GuC2fWqP3Voc=",
        "#=qdImPAY1o3YhbLtukwCQ91cISaeIEWRKSYrGZ3dTVnkY=",
        "set_AutoFlush",
        "Exception",
        "fqz7@+",
        "X.6t%",
        "InvalidOperationException",
        "#=q9DR9MBj4z9rQMPU2Q48EqjtFhU8AMGWHK02_s7IakJ8=",
        "get_UserName",
        "cPy.iq",
        "#=qJ8bMKCzzllPDbJIfPSoGMA==",
        "#=q$fGRvwQxjFKeY$SH10p0pyPTU$R77VMKr3CcLFQeQ2Y=",
        "GetBytes",
        "#=qGzqsy60d_qAVRip0TvyGow==",
        "7|e9't3",
        "NanoCore Client",
        "#=q95w9MpaG4ZcgkGgnmQITOdHr5IaLXD8aC6o3EqtE0PQ=",
        "h-uZo",
        "ToUInt32",
        "BitConverter",
        "set_Position",
        "#=qAk5SEnvr6iWKzWTaOapTEA_BFwuNkz68xuZLTnuQOh4=",
        "#=qREZQml1AE$F8eb3teEaUmQ==",
        "GetFolderPath",
        "GetTypeFromHandle",
        "#=qOR7qPTYp9qHTyadzUKgUYg==",
        "#=qxH0vEx09STdEljqb$W1E7jvc94T2TeZBAEeRdiG1_PA=",
        "EventArgs",
        "#=qamR76KZ1klLpv5s7oSbjxA==",
        "#=qJBJs_Q6YmbNTnGoWFx0s8w==",
        ">_<!u",
        "get_Current",
        "#=qtxap8xCUFH7z14nNy3cjjw==",
        "FileMode",
        "#=qlzCbqLxFuzycCPDZStFfAA==",
        "OAZ7P6",
        "}(K_3",
        "#=qd5f1i4cDO3tAO_bEb7g1cw==",
        "#=qfHad4tglpNfnMqZ6nFkPPA==",
        "#=qZRkZQGrnZUWoFBVE_TP$5Q==",
        "#=qS8q1FyJsn2_ukKh5ONBATg==",
        "t,3!0",
        "#=qA$TQXn2i$KwpdqxTX6vvVw==",
        "#=qEIGjjvppBA3BShbdBfMkQQ==",
        "#=qOKSmYE47P2z$UXqGETlnfg==",
        "#=qbMe5UnnXEF8aurHaZz6klA==",
        "#=qDH4GuNn5iW6RFhEPrfs$pQ==",
        "#=qJdNCQZ8JQCfthL12ut8Zgnr9$rl3CuJQ4GAn54E6CXs=",
        "#=qAsxHG9v$MAI6$NruMbxEjA==",
        "#=qk$cpdn6seqbcKjxGnztc4w==",
        "set_RemoteEndPoint",
        "#=q5hEV9yBEvglIR94FFM9OBszK4aiazrmJrQshba2kpDY=",
        "t'G||",
        "#=qcCYGLZOh9EpzU$sjJG8ZyQ==",
        "#=q79YE7jk$t8I7uIUVykHcVA==",
        ":W40!",
        "#=qF7qP$SJNVn6Q0z6ARFaJgM2aiYbkFhrfYn4Rl6Odj3I=",
        "z}m+2",
        "lWKhz2",
        "#=qQtwc_i6uv63Hs$aOrPLxrMU9lMXbhRW79NANZrRxozw=",
        "TransformFinalBlock",
        "#=qDt_4RPbN$YmUyKsVRrbzrjU6uaXWwjHkaZoJAcuFCCs=",
        "kE8a1",
        "#=qP42Tluk0y5t5VrN_nwVhnaX9baaRq2NaLaW6RMHNX_k=",
        "#=qrSKFiRrFo6$kUL7kjfG3zg==",
        "CompareString",
        "Sk}_l-",
        "#=qdwmMObmoGgv5eEpelZDrHiipw5mUgryufdcXXig375Q=",
        "get_UtcNow",
        "#=qmiBgFZvSMQ4WgT0UQIJlEGkYZhWP0gsBGd1anIAH4so=",
        "#=qKKJCW_KTAsIH3uNlP3Z4Tg==",
        "Equals",
        "XGzdJ",
        "#=qDwymJFr9Z$8uhJ6g7so5xw==",
        "#=qWrm21vQ8CBMZP_RBTwpusA==",
        "#=qABNlGFDc7nOg_C39swAcLA==",
        "#=qTMXjZFh8G1ehMXQzo1c_k7izR$ZNvDyCJY5aoZ0yOe8=",
        "#=qwHAjqAoc2lT8vaebbsWerg==",
        "#=qyI9vgsKRXHDyyks4VCAjzA==",
        "#=qLLh1749MqIyRucx6BFMp7Q==",
        "G3feffefefe",
        "#=qObBSq08BLhHK8B6pYQSLOw==",
        "#=q3p_D2U81K1hW2D54P32yDw==",
        "_Lambda$__8",
        "aYc9x",
        "#=q62cZqzG2QOltpyG5v7exPQ==",
        "[SZB+T*",
        "#=qiNB6YyqAJbx2uPAiP1Ihw9dTNEtwaZElmpYLZcGO64Q=",
        "PS@VO",
        "#=qtcl57G6kPr7DDYeWeY389w==",
        "#=qQ7tSKwAULKz8TSFsLbtapA==",
        "p:J%,AJ",
        "#=qOmCJCQ4xVqqqlvNEZD66Wg==",
        "#=qTawRDksY2KFvY5V2vw1_pA==",
        "^WFm0",
        "get_RemoteEndPoint",
        "#=qiJXCsKWBF9DB88uzW4b92A==",
        "#=qo8RCFr_ecPE9NSA5cyD6QQ==",
        "#=qQUdl15sQ0xTV$45YaAtVB9Bx2NeRc0CC_5Lr_HuNXwU=",
        "System.Security.Cryptography",
        "#=qw42CdKVHw2dycv8VU7DItg==",
        "8ah J|P]m",
        "ob+zx",
        "r'\\txqY",
        "GetValue",
        "Enqueue",
        "twOk[",
        "?}_qu",
        "o7.<#",
        "CdX}g",
        "#=qeADSRAqxC2FlJbA5Uc5$2A==",
        "#=qVqTMYHwCmwUHM6kkpNkbGw==",
        "YV= J",
        "#=qwGYG3$xqr6oMjxRyF4i0Uw==",
        "get_Count",
        "#=qRtpaHvp1hQcEDS$UubP_mA==",
        "#=q1r$Sd9Acbw6KsKv_F9uYTPvvGAfiEwUnai9OGYAUQBg=",
        "sLP:w5",
        "U>HKh",
        "#=qL2Az2fdQv6DkEBC_x$bbMA==",
        "ProjectData",
        "#=qWszclzYrfU2ikD2Jo7BLiQ==",
        "#=qcfHq18AlWjOy12tBCM8Tbw==",
        "ValueType",
        "#=qaysgaPdcuRrUvev6__tYEA==",
        "QI(D6",
        "EnterDebugMode",
        "ResolveEventArgs",
        "#=qokX_wSaMFvPLXvDQY377gw==",
        "Delegate",
        "Interlocked",
        "#=qs1aB65G6$bPi1$cdOrXkCA==",
        "#=qFWCMyHOrl7QbIPkMYdiWJg==",
        "#=qM4zv780c6Jc3GVu15xhaulIEjuiWD$RKEtosugOXKLA=",
        "#=qnDLRD4lBlfyGeJyuSeq2WA==",
        "-/&~J",
        "#=qd92UVUgmlXoQZdJDkVvBpfqQ5IrxjaeWORyWFC422PQ=",
        "NanoCore.ClientPlugin",
        "#=qYCS3QLrXk$FWhHR$BIzDXQ==",
        "#=qJOtLSdKNdNGjNNoElacScY2TTWmLUvN6XZsl_FLfP4o=",
        "get_SocketError",
        "#=qOgNXWEIS3IQJCnff_sTmrA==",
        "9{i74",
        "/==du",
        "u]Lq3",
        "#=qHdV5wMNiXS49lDrqJF3pqA==",
        "WrapNonExceptionThrows",
        "GetType",
        "set_Key",
        "#=q3C4Iol1nMl5AFLWNdE6nxB2_kG0uXzx35vvsn$gQzt8=",
        "#=qdiuHngY4wejUsgFY5u7CtQ==",
        "SocketAsyncOperation",
        "fefefeffeefa",
        "1.e.I?R",
        "@Lt^GR<",
        "!MXtjppG_",
        "#=qDTvHA26pSwiGBDknUzewBVNt3YGW7YeSiQRH8F$_CMA=",
        "feffefefe_-",
        "Version",
        "#=qpSjmalSIZ6iBUAWRLBOkQ5sPqtZAetb$LjkOVwAdUac=",
        "#=qD_C1_4vUU8j6eQSUvsJDw_O6DZliNi$NDCaON05RwdmBpVqAu68W00hmx80mCKp6",
        "KeyValuePair`2",
        "#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=",
        "#=q3eIsVMg85$T5I_yeach_tN$TJG7$vFUaeExZx7tMHps=",
        "#=qxLboOdsVFLmyLD939$tUsnUMYRMeFnzOLiWxQdY7sdc=",
        "Od$fz",
        "#=qSl7F7iXGTH9iNXHds05fxcgA7Cydd52A6vZtHH_41F4=",
        "#=qCy_StxaanQioOSGQ9LimCF9_Wy9AMBNKclrIIUI0AWs=",
        "#=qUomzGDQTZY7jASgBmW35Fw==",
        "#=q7Kx5VWqZvUxLZ2L5c7WH8A==",
        "ntdll.dll",
        "feffeeffeef",
        "z'7iF",
        "#=qc46h_4WA5z0UkWODs1nwXg==",
        "#=qB8Wn1MJrSNWupWDx0sYcAQ==",
        "Mutex",
        "#=qHtBOSXbLfhirIdzL218uOQ==",
        "ClientPlugin",
        "#=qeXI2ChPq1TaKaY8cTwWe4uWAyXSGUqAWxM21uH$6gYc=",
        "9feffeeffefe",
        "Gd6Y}63",
        "tlW%7",
        "ReadSByte",
        "@CLg#",
        "#=qo734_kbse$6lTIlwlz6A8A==",
        "#=qhnLoeDP_EbzJexQQPp_LLA==",
        "#=qnDc3CmkCB1QeN2dXbmqV1Q==",
        "J@yz[X",
        "O)0m%",
        "DebuggerHiddenAttribute",
        "#=qfoMVJHfk0BnMs4x6mHO77Q==",
        "EI6AX",
        "afeffeefef",
        "#=qWsrg06gTzsE5hhHu57fJFw==",
        "<7gc3y",
        "#=q$6Q_u19FhL$wNOun9AB$CQ==",
        "#=qW1Ty88cS3yMuRwgBrH3qpw==",
        "#=qGPdnFVTlqnS4tiFpuQulXa$2eC7Pe6YqVeImkUGsMl0=",
        "#=qXOmEbR_8DUzPz6sW4Kmd6kaKUIQOYZdTpvq2CkB17PTlG1zEUgI_P4skJXU2VwtO",
        "ArgumentOutOfRangeException",
        "#=q6uKQziMZIL8_PaX2KpbPTA==",
        "x_ddRR",
        "#=qvz1sVA0ePAgs1nzIHQTFVtjljpeJ1QO1S19vLxn8DMU=",
        "GetName",
        "ThreadPool",
        "#=qOYQA1S8VHR$mOO6XXuyF9Q==",
        "5P^Fd",
        "wBXu ",
        "Control",
        "#=qsB4PatedVyMOyo9s5n1OTA==",
        "#=qi_z83UuaQZa6UsXCAahbTQ==",
        "#=qQqZpewiWxGMAW$tQ9Rz23Q==",
        "My.MyProject.Forms",
        "\\GR3/",
        "#=qZvjD49iuetyLKBIiF$ZmjA==",
        "TxW\\u",
        "EventHandler",
        "StringBuilder",
        "get_FullName",
        ".0`r.",
        "&&*}c",
        "#=qCGokdf0OOxeMJLDkXSfc3NPmwygIQ29RjKQWj$wbNGB9C1pPgma_891QiNyTRXcA",
        "#=qw1t7iX7Q4P$CBQxdhg13BQ==",
        "#=qrQRxQdT4MC1qfwOd4n14uA==",
        "#=qa3EpMqO3KVCTrDUnetWt6fRbeWox1uN3vfSP5v_W_wc=",
        "#=quebj1wBCmruzAKmg6Y4Igg==",
        "dE,1%",
        "#=qhme1CFqs_evb4VXik7N4x7lNdqSfuNy3r3OUWZ1V4Zk=",
        "#=qKpwDTqgBVuprqflj1$7QZw==",
        "#=q2Xp4jW9C8Ta21HxmpVVhKkrHyOAsktLziyvL$pPr$5o=",
        "#=qCaHpjtavBmCU_o5x0kJsKA==",
        "#=qxG1wJpkOHyc4AD8gtAdxAA==",
        "-<&~C",
        "#=qeD3MBfedCIuKIQf9V1u2N3YS4VXE_FOHqw_XAjWtZK8=",
        "#=qui$hq6ka6v3VYA7sCjpJmcmNECKESf33DUzrmeSOmg8_E_GsgWi7VMMVWUGuO5wH",
        "SearchOption",
        "=wR*\\",
        "ClosePipe",
        "#=qb0tmyILenEyH_R9DXJFwB5rGNfkKkR0Y5sGtBRsV3YE=",
        "IClientNetworkHost",
        "#=q9Dmi1iXzL1JAj2RiS$Q5mw==",
        ",$&s:",
        "Microsoft.Win32",
        "cJOd.",
        "#=qqRc2eOIidDtWq4y7W2lAhSyv$pBRJdAsYlXSRUcwizw=",
        "#=qvbTNBihG2zARsewkRIFTSQ==",
        "#=qWLKNBubktRcyu8vI4dIAJNOqajvyL7NccmUEC4QD9y8=",
        "#=qHiBdWLOLLVg67b8lN8FRqgmYNWZfcDieu2MH9_zIY6Q=",
        "#=qOsu3u3mLIa8ikCCuCoOv_w==",
        "w5~~O",
        "#=qs0qPjhSgxy3k5gj_gt12EQ==",
        "V53W-",
        "LXHi&",
        "&oI#3",
        "Component",
        "#=qcrlhteALkcfYnKFH$UWw$HzZqj8gdN8_KwUKIC_ywUo=",
        "#=qXuSOL4ETByiwdARI_Ds0Cg==",
        "ReadAllText",
        "#=qUVvjDZc2eypEDWG9cFZdTg==",
        "#=qP6OAxyfxw$Mj0oVKCDnh2VZfwY2Ap_uDBmUyxkn98Eo=",
        ")`].mt",
        "#=qsOMWyP3LvE9$utIXVnRnmQ==",
        "FileAccess",
        "pHR`z",
        "GetCallingAssembly",
        "G<o*I",
        "#=qIOX_rwHrS_RLFL2igzRsUQ==",
        " Toh0Mi",
        "#=qKXWwuvxG9klNObPbc$UF0LIw0aZIk7Z0VPIncl8uFJQ=",
        "#=qhv_9OQaSyr5PWElvgkBxFw==",
        "Pw*H}",
        "get_Variables",
        "#=q_UogavoS8ANyZp2cF0B9t7qG1b3QUqGTYeTlmQIKxqY=",
        "#=qU_UZ3uhfwWgI9uBw5HT3xA==",
        "#=qbFnmVfulgLVjclcqmmhqFw==",
        "5=\\\"x=",
        "#=qccx4d_xNMPrZUHpmyYb7fIKkXAFa5XEyOIxXg$XLtBw=",
        "z#-C~",
        "#=q9WHClFSp7T8oS_DNFEbAHQ==",
        "GeneratedCodeAttribute",
        "^;d18N",
        "#=qIKJSaaKraxRzi3AD57FKg9MQkSdmOqUcHNxKjSZFGkg=",
        "#=qixBu4j6Hm11f3$mLrzkCcE4AVWtWeNn5nQguwdGbWGg=",
        "FC^\"7",
        "SffeeffefeYa*&+",
        "get_ExitCode",
        "T#M6g%",
        "set_WindowStyle",
        "#=qRkk_hj7p4gbUu59IVllqeQ==",
        "op_Subtraction",
        "#=qy1cXcK8A6uRpLlCz7UKkNw==",
        "#=q_kGyEn8KrmBmt5M1N9cUSg==",
        "~`Il3@=",
        "#=qSJAMGBE37IZjr90jS4_MYNWNa1$s8PXhOErbnAhK_ZI=",
        "1.2.2.0",
        "#=q$7KUBFuOZT85iBmKYeGgXQ==",
        "#=qFU5Nq8bBPIPoBGBl$k8ehEhmgSoFzsflrFNnOQsCK6E=",
        "ToLongDateString",
        "#=qpNR_LpdLu_eSOZVgxbr8UFRlKjbiBX7LOuGAbGS07mXUJI3AAilu14uPN_kfaTpW",
        "#=q1vWrLhskrN4OoWzxKuDDSQ==",
        "Increment",
        "QueueUserWorkItem",
        "#=qyo6slTMfgD8IrZ7nr6inHA==",
        "fKOhJe",
        "g;d0 ",
        "#=qz5nGZygXT2sWR5FWGAcAzA==",
        "-4&{c",
        "CloseHandle",
        "get_DiscretionaryAcl",
        "#=qyMcWoZuG7jRWeztMnp6fPmxxmqfVgP7DLzGs7HeF4Mo=",
        "#=qDJ0VTVPWfAWYghKX_DdnsQ==",
        "#=qSh9$w8INPkos7acCjV2yFw==",
        "VCd|P",
        "#=q99eEsMLSp2$EVfl66Ua2d1YMqB58RPj30lLgJzJJ64o=",
        "System.Diagnostics",
        "#=q8xbuK7pqyq7mWB67vviBtOo1WSCccuR7xEQnGnyxMyQ=",
        "U)~R8",
        "#=qtS81hD$ORACBvdEkFyqaXA==",
        "#=qxG$Aklpbf6gyBfAqTMmORA==",
        "#=qqj4vWwKBJgvjF_JTc8V9cQ==",
        "^XpV}A",
        "SetProjectError",
        "get_AddressFamily",
        "set_LingerState",
        "#=q02vg4rlYSKrSiDNi4xWbtg==",
        "#=q44BQlEuOnjFd0LbnzKKIIg==",
        " :hu'a",
        "CLSCompliantAttribute",
        " 1UcF",
        "6hl zb@",
        "z!+Kd",
        "#=qy7SaTx6mT2Pix1CP6ET1Hw==",
        "/!p 8",
        "+idwV7V&",
        "#=qyU_gXk4hv73zg3zoSZSLhQ==",
        "\"qE0K",
        "ReadDecimal",
        ";Gt3Aa",
        "ffeeffefeXa*&+",
        "#=qpXMe_UDgWsOaRVi$02jxzg==",
        "#=qM9NIml9iDZh$Fjh9MocFWw==",
        "#=qVqLFp2u1the0Txg1vhieSw==",
        "*-Han",
        "-&&s9",
        "#=qmzYu_D9f4dvUPauEaU7zvyNjCyGp_73Xn5SffrcfQAU=",
        "Encoding",
        "#=qZDHx38VzWszDP$NdqQpGo3ak_Z$zbLpODJse1_Sr2hk=",
        "Dequeue",
        "G5Y>K",
        "#=qi6IJz6lHhd8GI6qygHcvTxSTD2wk_BSYwC2NR2eR0yg=",
        "$9913da77-0b53-4e57-a036-30c0c569c99d",
        "#=qaPkEKJmdD7BgG18R0WsnHA==",
        "H!Y5u",
        "#=qbYAYBaHwcEbf1CaxjAi1bw==",
        "#=qGjp0Vb6efONwANkcKrMTkIBxJvr9AleFfJriudyTw3c=",
        "#=qpghRvZG4ZfcsmvAYC$o8qN0WjB387Pn9cG$Y9HJ3uwU=",
        "kVKc ",
        "BinaryReader",
        "#=qbmVTgf9cRSZkM_UgFSJrlQ==",
        "B*` B",
        "#=q3rtw1eBB$yyPLXzQW$mDOw==",
        "#=qD4n8L4W9wQXrF7w_31K9bjmy3jeB41mSJJrYkh6lpiE=",
        "GetCurrent",
        "#=qdObzsTSX0MpvDi$OPjsFh219oh6Iw7DshgNWGveAvBQ=",
        "b'^-e=9",
        "ConsoleApplicationBase",
        "#=qRIR1iTmdtHs$eBwEdoKphw==",
        "dv\"8F",
        "#=qth3CIdKay4zIa5SBJzx7eA==",
        "L=yXP ",
        "#=qglhcKpwNlOshaHMfwiT0UA==",
        "PipeExists",
        "#=qFgBBonKcV6U3Je0BKZZdAZdyEla0MkDel5SRrEzLUvs=",
        "#=qwTOYF_qEkI0dXowKJYtI6A==",
        "#=qeE3S$kdx9R0s10U9GzzcFw==",
        "#=qNZVIIdU4QECigaum94nwLctVkDSuRt$X4_IjuFpWVuY=",
        "#=qRACckQ0ejzlKZgeXX_CPJUyKbl7Zu7QfhWW6eMM03VPusMYB8LREfJZQVcTGHBm_",
        "#=qIrsTmpVUMRgxokIHlpGfmLtKeqxo7vQsjSkKUKFpH4k=",
        "#=qt0$GxMKBUHqpa$X5z4IJNA==",
        "#=qEVnoj7wKonGmgnYpK7PNGg==",
        "#=qtz1ayBjdbHAw$ecbWtEnYJXs5RBd798kqoBvIJunFxc=",
        "#=q0M0RRypoNIjajWAugf6WjbxM$GiKS9VjK_mg6sI0TI8=",
        "ClientLoaderForm",
        "#=qqMkZyGiL$PHkYblZrq1S69029tlEdPXkxbM_smmrcRU=",
        "System.Runtime.InteropServices",
        "#=qAlVTP0_ZXWJdoW5RI3VoXQ==",
        "#=q_$06eDx4N3eSJzkchUhbnjKtHnRsckM7I4ZqcwfQO8E=",
        "#=q_jQLaNdtSDa6ovA0VGw50w==",
        "#=qyNgKOA3iTYvKx8QtBmkDXA==",
        "u`pyK",
        "get_StackTrace",
        "#=q9lvTmS27dN6FAh4mbOnRsQ==",
        "Computer",
        "AceQualifier",
        "#=qdupfYLPCEHNi$xwR52i0Lw==",
        "#=qhRDMBTieg0MID1DJ88eKUA==",
        "#=qj8dHXOkfX1HmIFktLFgFBNrpDhCGGJk0RPJopDOaBy0=",
        "DisableProtection",
        "#=qyGoc_ssbL9RdagmvuBld1Q==",
        "fefefeffe",
        "/mKGH",
        "#=qMoRe_p4fasg7BcMJcnicWw==",
        "#=qsx3W$FQbKM7QI$Z1TXWW5A==",
        "#=qO4hvdkAW0_yOcwEk_VD$lw==",
        "#=qaxeBDkuvv4PncQ$UM0p8ag==",
        "NanoCore.ClientPluginHost",
        "#=qy_aVo5ze7CCnCYXCQvhVBg==",
        "RegQueryValueEx",
        "#=qaRJX6K2L3xhR1w3zuwE79w==",
        "Enter",
        "TargetInvocationException",
        "#=qbNq0eOj9Pw66KrsrDd4qnA==",
        "#=qOTqiIHVN4TWDu4_xhgbifQ==",
        "-)&oN",
        "-7& E",
        "#=qZuX180bPJwK7MhIsqenk34Le3ZCQFFLgmBb4sMlYIpg=",
        "#=q1kCP32T3CbXwL6JS3UekkltOicB4KjO4W45iMQoNvNk=",
        "#=qi1H2yZDbCxvPo0ia9nVnuw==",
        "mscoree.dll",
        "AssemblyName",
        "#=qnOTCmwQWr6BtiNf9ta8BJg==",
        "#=qOWs9MBREWujnaIdYgAI1lg==",
        "DnsRecord",
        "#=qjryTBW16mUfo_ItH9KWoGQ==",
        "sUjT[",
        "#=qSoHRCAcaypsR55EueXBy1g==",
        "#=q0FQ_PiagXHm_B8aG8Ji9Dw==",
        "Compare",
        "#=qRHdMxv5xMrip5nI3eHU3Y52nJ9DhG_ImQVoJh$ooupk=",
        "FormClosingEventHandler",
        "Operators",
        "ReadInt64",
        "#=qNsyg$dsR$GJkSvK2TftGTNPuC8S809j_UmmfNnXTTOo=",
        "psapi.dll",
        "!ZKuwt",
        "B1rI2",
        "#=q6odj$nz79NlWTFUK6$Vbrw==",
        "#=qzjreg8z0D4BPrx4RxUJBoQ==",
        "BeginInvoke",
        "#=qj9swjNLNpEBN8mkOlVmrOw==",
        "|txmy",
        "#=qRpw30Lh0nfhDryqjhyjikg==",
        "#=q2l$b42bR_hlbzUjQTk6vFw==",
        "qY7u%",
        "L5J9Zm",
        "#=qWBzgr2CJEoV4DPIbUzdZZA==",
        "#=qWsAxoahmYzeECOO4WB9kTg==",
        "MessageBoxOptions",
        "#=qF4e058OW__NtTzhWOs1UXEJiHrTSwnIZ3q2u9UaLbo49AZaoog8nMfoDeA9BGVvy",
        "get_Connected",
        "System.Runtime.CompilerServices",
        "#=qDJ8UKTQIGM$_7XkvuUdssA==",
        "#=qkbMW3ViV2G4xkJU4KS4XYUwKzC$oNmhjZ49L9c8BrOM=",
        "#=qCPeeDj1tZ3_XePWJJx7FTlBzWHbtSGvCe1Je6nRznW0=",
        "YAo|z",
        "#=q8fYxP$_i6Xk0$6OlSwUHKcvhrevHxLXqXqvszBe9OtM=",
        "Exists",
        "#=q9c$dxNln4J1nxxC7UNVnfSKvSgKS421$zTS6z9ahlusddEno_MZclU7Qbfc$Fyw5",
        "hpF/8h",
        "#=qa6Qg4SaIgpIknX0EmOdEQg==",
        "#=qSLl9utb6ViD7fbZHSox8oSv7PZDBMO5b6MBr_gzzHF8=",
        "#=q7wyeNFqtiGUhQt6sicod9g==",
        "#=q4P1tyVDbmSIMgskx0BrPh5ZxjoQy0earrulDSsNhpg8=",
        "#=q4fCxMFfzJ9KgfK61DJRvZ5wDvDfYnqR8bhY6TGq9aRk=",
        "GetFileNameWithoutExtension",
        ".text",
        "#=qg61MaViIt3ErBjuA0N9Xrw==",
        "NanoCore",
        "+# S&",
        "#=q2JCFpXLqGkqf10Rox8zrAg==",
        "#=q3_2_t217j7pS3JjemZNI07w3dukMmHXPSE5$LTnvGS8=",
        "#=qN$clRL1tbKGnARF7__FwJg==",
        "#=qoa807UEkAFejsz9ub3crU9Uahxxj5JIyAtKhnrEn$dU=",
        "IDisposable",
        "#=q6W8MK4LKkww2JvseikWqeA==",
        "l!$ J",
        "SetThreadExecutionState",
        "#=qQCd2OoCcjOFxsuzhZKv2M7$UnAX8JX19NdffDxgtv3I=",
        "WriteLine",
        "yp~7}5",
        "2(|Ht",
        "#=qZnbTkU5kDU8O8$hMGiNZlQ==",
        "~q)-Aa",
        "MHRi'",
        "$#%#&#'&98:8;8<8=8>8?8@8A8B8C8",
        "#=q4kUEXPi93MnvgzV6ySNPRQ==",
        "#=qeAvM9D2ZXEFg7Zo1J5PeVA==",
        "Connected",
        "ThreadExceptionEventHandler",
        "[[s\\3",
        "#=qqsKAc3v0igxVSmn4Feg8q$1tNTWiqtCBpA_xMlgU$f8=",
        "#=qtkqHWk1kvmO5zt3tTCyF2Q==",
        "CurrentUser",
        "#=q3vPs064Rj1jBOLtFVqV4DA==",
        "#=qYfWGXuhZd0cmWjiCvW2EPw==",
        "GEe!c",
        "_Lambda$__7",
        "Initialize",
        "#=qTKJrybVS3pgV4uZ4KNtp3g==",
        "-,&~~",
        "#=qxybSLhWq6EDNDl0$FuPN8g==",
        "Gg :7",
        "#=qGfiJ4oSCDzJJaNmf22anQw==",
        "#=q5esm6BVWqrzEai7Zgw0cmQ==",
        "advapi32.dll",
        "#=qKXbEtqEIo3E2xdYWIElxIQ==",
        "CaaVu",
        "set_ShowInTaskbar",
        "get_Exists",
        "DiscretionaryAcl",
        "&&*}n",
        "MD5CryptoServiceProvider",
        "wyww_",
        "#=qiO2giJomMFK1wa5$389nVw==",
        "szVTe",
        "System.Windows.Forms.Form",
        "TimeSpan",
        "x&K5lb",
        "#=qe99VPFgyNENK$KtARK_iPuwvOEw_NRgC00PdG55dmGA=",
        "#GUID",
        "#=qDqyUVyJLXCtYqhZ0$opqkomqhUBn2WCeEEvGAXlNQ$I=",
        "&c{'u",
        "#=qsY8nKQa1iMT2g$sVoLy8u9jrLGP9DMATpaFjFx3wjNU=",
        "#=qR0v_DeAkzbUr6_Md5tN4PQ==",
        "BuilderSettings",
        "IndexOf",
        "#=qovc0J7K6b9Eq_C0K46rbmg==",
        "VegZ'#8Y",
        "#=qoT5qP9FYCI8F5V3gKO7eMg==",
        "#=qzzNUaijPluPyLfyxwDObxw==",
        "MessageBoxIcon",
        "StandardModuleAttribute",
        "Rfc2898DeriveBytes",
        "#=qgAKbtXqj_idozuy66wPGJA==",
        "ReadBoolean",
        "GY]R^",
        "#=qlsj4Kl0M6SYgZMJLZ$QkSw==",
        "#=qFikK0kKzvE4fvbzxpsrllMMR8oLIJtNPAGP1lZZ4prs=",
        "#=qP_nucp5xdFjeAVWRfZ2XfmvYhkwWbeeu3y2fkxvS0yA=",
        "Enumerator",
        "_Lambda$__1",
        "#=qPjPHWXGbaA$51Cna2ZaMpQ==",
        "System.Net",
        "add_Shown",
        "#=qC6KOBEMWwIsQr_847d$S8A==",
        "#=q7YEFsRA19ZrxKTBeL$y0fg==",
        "#=qlFQRS6FW1ex39P1F_VW7Eg==",
        "#=qp$ZVC1r9spi890l$D7IwEd3faoKeWHvv42mVq8wIIWM=",
        "#=qXkgpfghvTKDZGlXBGI4x9veQO4JfjF7GW2ECw9$L3EvyKZGOnziwXE2Xr1EkpRwe",
        "|mOLU%",
        "Microsoft.VisualBasic.CompilerServices",
        "GetTypes",
        "PtrToStructure",
        "OpenSubKey",
        "@PC,~+tfdo]a",
        "#=qwVGSEK8LoRuNWEOYfq8$hq39mmxHzM3pIeoRef7XNt8=",
        "#=q_WoKv7McWxMc2YtmbiVaCw==",
        "dnsapi.dll",
        "#=qVIikDYmLtr_O$2vZcqLhHA==",
        "UnhandledException",
        "#=qonMVJIv_P7bZ29oJ_eSSxA==",
        "9e!!XmH",
        "-LF6{",
        "#=qChHxg92yH05lHO0u7UrDcPo$UK1nFXIjb2DI3pyR0FE=",
        "TransformBlock",
        "#=qRYSdRGBC6LM4UFJJGQnk7A==",
        "wO^@3",
        "IPEndPoint",
        "RawAcl",
        "#=qNzt$mJakh1Nxv4vDRDjTsa1OVDKMAlRCO__qncxMoXRz8jNE7AWvE0B4WIqANR1p",
        "#=qFlfDskRbjMOXZPvSw2W2UA==",
        "cg\"`f",
        "#=qK4wGebauvtmTKO0oAyLFzHLhr9rU3HNJmU_ur7Zop$YvLzV4HzmIQ45YslW_q1Vc",
        "#=qP3lBpu0cs5q3Lf$qXSL7q6szA7E5M9NqMzkAFV6l4CI=",
        "Close",
        "#=qh7diH14jww3Fm9rMJ_jIfQ==",
        "System.ComponentModel",
        "#=qGS6wNk5u54YEpqtjtMFIpQ==",
        "PADPADP",
        "#=qHtuZg55b91a614FmHMsOMQ==",
        "#=qp9IgcHwNxIVh4GZl4S2tcJtSz0NII67aXwFNDcdhP63JHe9MNg0kPsAos3IUd98k",
        "[6}7r",
        "get_TotalMilliseconds",
        "get_LocalEndPoint",
        "#=qhbsl5nSqHjmKK5u9FniHoA==",
        "#=qM040QWzx1oySCgUyYWc9zA==",
        ";6$)S>",
        "zR9}G!",
        "nS2ZZ",
        "#=qUvO$SDWQpHm3uJq25yzwvw==",
        "~s)gxn",
        "#=q0EPYqANhk$fGDlTztPFu2jRCdUruoFdUMwStI_GHseI=",
        "#=qnIGrpAn2e$qTqbA22$ONbQ==",
        "#=qcyVktfYxc51I1XopnwGNjQ==",
        "vV@N#",
        "XQ/+}$",
        "#=qRCCuvWFd9_O8CfEZhkJtSA==",
        "#=q37jfceDpvm0BhKQMkpktNw==",
        "#=qd3Itd1ELDPHJxhLvt0y1NQ==",
        "#=q2Sd$5fx_doPt8h$UdBacAA==",
        "dk-WME",
        "#=qdsDfPo0zxdY$R7euM0a_vw==",
        "#=q0uUZuMiILVbPeB$t7lx1a0Is1IW4CfkB9ovgW99kERQ=",
        "get_OSVersion",
        "#=qQrBlfreeUYUGyN3hPOorGA==",
        "!This program cannot be run in DOS mode.",
        "#=qChXzjuiVYrb8OlqJPajoUA==",
        "ProtocolType",
        "#=qnoPzE9XMA8S7X5JX6ycJ7w==",
        "#=qOicuy1VnndMMXIrDqqx3EA==",
        "#=qCeF2tfSXulrE0bbyPxU$1ik7Jf3avSO4FKBmKNH9QLg=",
        "kJbP/",
        "ToInt32",
        "%W>(G",
        "#=qHJMw55fNEVIiKcc4ry0o7_L9hyz3vS4jgKl3KMX8xGg=",
        "_Lambda$__6",
        "RuntimeMethodHandle",
        "Buffer",
        ";|:>_",
        "RuntimeCompatibilityAttribute",
        "#=qPgHNba2TbLgSqrCvG0e5Uw==",
        "#=qcDfNIFv7M2KbeeK2ufHf3w==",
        "#=qxYJIjuXFTjRvt41we4akdH1WN2nLMpesVOXXsYuSrHM=",
        "#=qtDC6IoLr5pnMo1d9qdAc2TBOnWqOdlEZHf8Itbl8cJc=",
        "CompilationRelaxationsAttribute",
        "#=qXIsqrB8Mw2TMQ5$s7oRSIQ==",
        "#=qd7RJPnCy4YddvoQeTJhlwA==",
        "#=qquFMi5Wa$w8aN9GGlN4H1Q==",
        "#=qFZLDtLWdUONY4B_gU_jjJi4BgFANcRLPMuWuQINdRLc=",
        "#=qVcF51voQmyGAgyAUz3313w==",
        "#=q7$Vba9f7UkS7OwkHeUGtrn1ymWXBIMnyiJbrBxyOPBM=",
        "feffeefefa",
        "CreateInstance",
        "#=qsUsGxFgC$BJaO_$VAtZ1Ug==",
        "#=qsLIORBvLMZm5c5Lb9Cm$GQ==",
        "#=qZhds7a6Pui$KE4m8ht8xuA==",
        "#=qsUdW_kbiEct8_uosknsYUQ==",
        "_Lambda$__9",
        "#=qb8Z0_4AS4r8OSPknVYvDfA==",
        "Monitor",
        "#=qxO41EOA8VDczxcMMPD9Hv85pbiPnTbukmYyDI5Z6X8A=",
        ",q6o&",
        "#=qrYH2MBQ1J6Wu3hhoHHVW0JQwxTYC8hYBTLbQIYHNBds=",
        "#=qWkPc$uBFgJrhuimjKXkFcw==",
        "#=qs4p7qYamgHyRCYZsTKM03Q==",
        "QL-f:",
        "#=qXyCbQ53pEXrdqhJ6oXoHqg==",
        "#=qo$DZvhC1PKdsChUToY52NA==",
        "#=qGCYL9FviWCrv0prWZC8VfgL34V_6XyB$buFX2LkjbCg=",
        "#=q5$hUSQAZNmEXcUcvGVFJrlqtw6IWJBy6C7LN$kOmTWU=",
        "b`*&+",
        "`%,h}",
        "UInt64",
        "#=qUZMwlqlTBPLi1iscPEnOdMZqp5jDsQ1UK2Kgux$Yn40=",
        "#=qxOFsoGbvlBlUujyS9g3fPQ==",
        "#=q5WXECfTJPQIQ2JoJDGsf9pTFKCPzQGp3$QlyT_g_ZCY=",
        "RDLXukk0",
        "-2&~}",
        "Stream",
        "uYt2H",
        "#=qNc0O1YGwS4NhcbB7sgpVgg==",
        "#=qlt$K8Ex4tZEPwTl4RuqGMw==",
        "ObjectFlowControl",
        "DnsQuery_A",
        "#=quRXaU$OHlRs_89kacdiUMQ==",
        "#=qb_soGTESOxGbPyWr9RZjig==",
        "#=qqLNJOrQl$9SirTNF5ZKaLA==",
        "RuntimeTypeHandle",
        "#=qZb1TYPPMMY64aTN2MpcGOQ==",
        "#stAIq",
        "#=q9x6KBL_arYpQC$zFf4pEFQ==",
        "IPAddress",
        "HashAlgorithm",
        "#=qBuMzaVqxpYkDVtTnLpbYyjTfZNKm8_4JkuoFHPxOBFo=",
        "System.Security.AccessControl",
        "Z6-yS",
        "#=q1BpeNGUQvsUFoXPmB6q50A==",
        "%XCr)+",
        "w@Ki\"6",
        "RestoreProtection",
        "#=qiY1B9yU2oVkPHxhn$y67SFTP8x1Jb0botGqdUGkdpQg=",
        "Timer",
        "VbF>)f}2/Qo0",
        "#=qkxzumuLbzy2O2XsBlM3j$g==",
        "#=qvQfNpqhSbw_$p1TB3UFgJA==",
        "#=qDBRodZmvuO0qLafxHA9KMQ==",
        "#=qrWXrfWfqyzD06oY$LsE9ww==",
        "SendToServer",
        "*Mx2#",
        "#=qJEtGIBRUjtEusa67yMyqWQ==",
        "#=qVvEn7vdm6JlvG9koG0JUIQ==",
        "Y3JhHK",
        "0zr:Q",
        "l:KXFnc",
        "WindowsPrincipal",
        "#=qqReemZdhHj1veATVZbU2_Q==",
        "#=qWfwpJtKOXBFXf_1zpmLUrQ==",
        "Collect",
        "#=q5mGK9suCIiUDZgS_YSrSQg==",
        "kd+Zc0<",
        "Qh:C;g",
        "9+=Zi",
        "cs8:t1O",
        "ReadUInt16",
        "#=qcp_YDS3uDXZMDFWGeFYphA==",
        "MulticastDelegate",
        "#=qP5B75c4g32E_HsewCKc$Ig==",
        "-*&{c",
        "#=q4kB_KjL2oo8adT7lfnt6ew==",
        "#=qPbvCT$UNIh_DPMt5F02Hyw==",
        "#=qKtJTKEkNf2mJVHcZzSW8iQIcsBglzcJJOkX7V_uB55w=",
        "#=q4o4zrrzr7uOw3pySDBOwZtAOdlhvudqcbIbhABkQfe4=",
        "#=qenWi8guqQrvoGB55djo0ka_844yTmViBn5_Fr2X6HAceO7AJErk_Rh7nfkfqtUbq",
        "X8St?",
        "LockResource",
        "#=q5fG5Wo3pzujuJKotO2WwDQ==",
        "get_BytesTransferred",
        "GetProcessImageFileName",
        "#=qQbsDS5g6rYgVt4AUW_pPJ8MQlCJBs7uyF9EY8OKREmQ=",
        "#=qyYejfncvZCW4q4y4GEV7QqOL4Aox1NSDqQmcpM4TQVA=",
        "_\"QS$8",
        "#=q0f150kYsIx0s3raR3xq1xQ==",
        "Utils",
        "#=q6ARXRSe2PbSpq5u4_c1Rsw==",
        "#=qpE_mRkS89WMXbQTdLD7bwp4pTt2zrWY_WBF1BLz1fes=",
        "GetEntries",
        "#=qtussAh$DpHFmu7sm9TXJyZsrjeJ6Xm9c2y22v4wQG2s=",
        "StackTrace",
        "#=qc3tkHe_7v$eGA2x6krh72Q==",
        "ClientSettingChanged",
        "Registry",
        "E9Hos",
        "MuCG@",
        "ProcessStartInfo",
        "#=qXzCb60v8h3v0rPCrGf606Q==",
        "#=qvvhgGCgMlZiK63M2bP1Kcg==",
        "#=qpaOobmVTnUS0322VEUTQd53tn4HeMWSoV2XuTUOmp6U=",
        "#=qCQ9vY8iVniiFr_C0wuoMFHQgjJIll0MjoDGXuPo1hYk=",
        "#=qVS$QmQjvFfsXSqQAKGSl6HGbkse2SG0XCab4upVjtRJkvhTEk$oIS2I9Zja7id1Q",
        "HostDetails",
        "#=qwWiTcboLi4zF4ycKWLBprqWhuc6ZDNNDjC8OE8DG1$c=",
        "#=qFTBwGADWl13TibdOa5ODk_Y2qcfMGC4lp4rhrZcE84kZNE6dU4EqEk2ZYKuJAWo9",
        "#=qK7tJUw5nsLE_rt2JHgqYI6_vH0s$mFFB1QifRuMCr34=",
        "nq]iG",
        "#=qKwlvi80KuDBelBsvucNuhRsqXRtqCfWqVH1dUPmd6_o=",
        "#=qzI8efPARogp2CZcGB2UtfAz2tJs0A4fM9fKvuTKYqi8=",
        "-!&o/",
        "#=qphSRC1xHjYarc$NSFAVMID1iP8dwbr6BCaxyrkptDP0=",
        "9dmG ",
        "#=qPYtEwg1BZk5tP9KKNl$36tqIdWilqjeWcpWKL2Zxnug=",
        ">Tzn8",
        "#=qmTxGiMA05lTEtoPPV6RFOih4DYS0uxrxPO4vA1H2j6U=",
        "#=qRNkKSXdFDcR_p8Jbzx9WJQ==",
        "IClientUIHost",
        "#=qGvpT_A2MS3Oi797y6jojBg==",
        "#=q0xixHwSTS$a9x5dtNZccvebVLuO4euYOepae9m2S64s=",
        "#=qSJci08l8EqyD9KF0joWzSA==",
        "]\"Q+a-Y6I",
        "Tol{@]",
        "afeffefeeffe",
        "#=qYKspnFhL3rrV8a6zSvXJWA==",
        "+7d8r",
        "#=qzAgp3UwWT0075L6Sh4PfZA==",
        "`eaWZ",
        "h|iw1",
        "jfk/43",
        "ReadBlockData",
        "AddMinutes",
        "#=qDJ4yS7fCDfIiEVFkwyEE6G3$$73HwRgy2_eKZUkxaSo=",
        "-\"&~k",
        "#=qhE2P2k46jiSSjO86g3nB1MkLGC9_3avDpI7iYbUHr5g=",
        "#=q98hMbgVf4fBR3MKeaM4uQI$YRLQdIr1biYYF5369cW8=",
        "#=q5bws5LlHvLK62TcSJadQTw==",
        "#=qP9qYgJs5_O2GP2pI$ho4ZSa8wQkwNQEBMg8VjNRrUWE=",
        "#=qQkx1bBZns8hPde7$PcvfUl2fAairj6t_H8ve7nJO2s3BIB3t7PXd4ZR9h0JHyxrX",
        "D.~Hk",
        "P!HugQ?[",
        "ToArray",
        "#=q9LcncGbDdZaeonfU3943IQ==",
        "#=qhufLjssUmkN_mXHuWOXl8gUDxidnVdWY$tHhp2HS0ic=",
        "#=qJpz_ygP5AiHfhtTxRulSsw==",
        "#=qtNbB44E34Ui_i5yJYQ5ntw==",
        "#=q752iy7NeRDzz3UAYRlXXfQ==",
        "get_MetadataToken",
        "#=qAbQ42UrUbGpmkYA2zun7Tg==",
        "#=qFY80y4KcMQywRNP$ttVIXw==",
        "S& B!",
        "#=q2LHISsr6oVwPjyrC2AFTD2_CdAouK60pDkoTs0efRSU=",
        "get_Item",
        "UInt16",
        "#=qN6ip4UNq3TKArPG3ZZy$zw==",
        "QSks3",
        "get_Now",
        "#=qLEtx_37WeiIPQPYSN8vY0qTNiL_L6nA6vkFQwNlcU2Y=",
        " wst(",
        "FormWindowState",
        "?dm~t",
        "Delete",
        "-w)yS6",
        "ClientUninstalling",
        "a+t]R",
        "#=q6OqJPhANvYfkdc5uh_IKsUbLoI4zVFCxs4fpu7Vxr_U=",
        "affefeeffe",
        "#=q7uQjJN4fKJgs403tXnERFbQ1VWp3FBsMW_1ZAWZtc1g=",
        "#=q_0gCRmXint4znUKVJR_bzg==",
        "kJLZ)~",
        "#=qBk9t7p9S5R095rOkFdE8GQ==",
        "#=qT9sog7FujhNJZHxxUXVGPg==",
        "#=qYhk_OkZkBWola80M6EUqow==",
        "#=q74AbaKJhduohKQ4YDrC28g==",
        "34wM3",
        "dpi8t",
        "#=q2n0wwv9OpsrMrxVUVHoqGw==",
        "fpr=&",
        "#=qVxXNKnhAcArgJoGGYXiyyQ==",
        "#=q8WaW5L3_NY3KPDRN6V9mCI08mHUZbTcARcexWvaAL6A=",
        "String",
        "#=qxe_BfLLMHqYa_KBeLsRfpw==",
        "GetObjectValue",
        "#=qWNtQAckY3EoQ$HeRpEQ9MEcj4oiFXpw6QZThgsGNZIA=",
        "#=qscQJIcBkI9VH8bZTZtABeA==",
        "#=qXULhMbqiur_al62NrjaiXWJ8rme0bKMO8KkV356NZwk=",
        "<generated method>",
        "#=qalo3zYdlWWh$dYSx9JnNrw==",
        "ContainsKey",
        "#=qKaOsg8ghd7KyYDCm3RhDg9KJrf7McwaH92TdOJzSw6s=",
        "#=q60UcvJzzgao2Rv_stV3rQhhxCdm95L1Gb83mKGH1VxQ=",
        "p4LPh",
        "#=qHauijmh2nJ5kHO6fTYBnJFZKkfzkWt5gB4mYS5OLOVc=",
        "z5LIw9",
        "#=q2c1dOwAlqEVK063i13$4Vg==",
        "-0&sY",
        "#=qcMb6hxBpdyTwCjvpzaQcC5dS3wbplPqOta7ERz_lMIo=",
        "Xr},e",
        "IEnumerable`1",
        "#=qfLFZgbR_r0GETPSprP6O9w==",
        "#=q3$9MQ9O56ldzMJGDeTdBZw==",
        "ToInt64",
        "-JJ_o~",
        "]h^TA",
        "#=qkgpjO3I2rdg6Il4nyqzgDw==",
        "?85!y",
        "#=qSbcOBh8Kf7zb$IciDxPlGw==",
        "#=q$mvEHEBkZud$AdHPWqsMQnw5Xm5sD4vBSSmqrKuXGOk=",
        "D>-[l",
        "#=qKU0J1fiP8KA33eFK1owekQ==",
        "Console",
        "#=qsR25pLrAgwps$DwdB_BuUbMipiUFFEDkypROuvRRPj4=",
        "#=qKi0KrAcAGUOMcS5S$2tJyg==",
        "#=q5grPwgEurSn6KutVLS5_oPClPR_aCEdSRk5nKP5bDm4=",
        "7kc#,O6B",
        "#=q8VTskDJ5TyHJcDeWmklddw==",
        "#=qbn24Ox5i732BM_T_R4Q3RtK1pEoSIYmxE9Rba9DDKEA=",
        "SizeofResource",
        "#=q2WFu5tRyicebO6UkQga8SbXrngw5YigfLTTVJqQy1qI=",
        "BaseCommand",
        "System.IO.Compression",
        "#=qwSqLSPEuM8lJy4sOeuH92YjPodcLquqdG$OodozwC60=",
        "Transmission",
        "StackFrame",
        "#=q8d8q1KZbTCKTAZreko1Lug==",
        "g,HbD",
        "#=qgW$Sn0ALOASuZcEZHxiZDaj3mNXTljqLa5onSc7M0U0=",
        "get_Key",
        "e[{ho",
        "V8/HKj",
        "Intern",
        "PipeCreated",
        "BVzl]",
        "-,&~C",
        "#=q7b0FP8eSMCctHkHIxEb12w==",
        "#=qG5YZbexfSlZk_cwFxKFh4HaY$Krp4rK2HdCH8OIs4EI=",
        "LogClientMessage",
        "#=qEqEPF0jj3sUIryvQNEKKCV9boaHFZuHXMROqSn28L3g=",
        "tWin32Error",
        "L9$t#1",
        "#=q9iu_XWrg9WTOw3hVDQcP8ZcABJLoMYtAY0HfRbaBN24=",
        "#=qdDrSQoelY6gHzRt_ma5NQg==",
        "add_ThreadException",
        "AssemblyProductAttribute",
        "#=qwBDUI_NSPNLYbPH4gy$3uQ==",
        "#=qsWAbPBa1yptbB97zoAjeSA==",
        "get_Length",
        "SU>)MP",
        "#=qc7QknLi4DrEENw9hVJyfaw==",
        "VariableChanged",
        "#=qN76bQl1CQ6EpIJzS4bbSnw==",
        "#=qA32zcbPIWwOaURCE8zDGfw==",
        "#=qqROT7DfncW7strhZvp0iRQ==",
        "FileInfo",
        "ConstructorInfo",
        "#=qqnp3i0xG3gb2LwEmwQLB8NQerATuB2G0aH1k$$26lgk=",
        "Change",
        "get_BinaryLength",
        "#=qbWN2780y2PKcyDt_4uktmA==",
        "3}/,V",
        "DialogResult",
        "#=q6wR5WMLGkL9afTpqmWsw9g==",
        "MessageBoxButtons",
        "p8q^Vd",
        "Activator",
        "#=q48p8EJcbwRuSJ9efJfzTZ7uyOBVlFQpnFVv30w93EJA=",
        "get_IsEnum",
        "a,CQYP",
        "z2TgP=",
        "f});o",
        "#=qrmavK4kbgFTgX3_IUlEoRw==",
        "#=qoygY$KIlhsLDneTXkJ_L9A==",
        "#=qhPbzHXREadcUSl6d6LhVYw==",
        "#=qVCHxDTr$$bwFMb6i9vBKRZciaa69edA3gsLNOty0RAzCorWRBUh2v0PgySYBEvZ0",
        "#=qgN8fDYnB$J$X9QGGYQsYuvA6BpDT4GE_ca7JiOh661Q=",
        "rAZ$M",
        "ffeeffefeefa",
        "#=q6NenfQbzQYLSZe2oYrhKsEGeaR69wF$W7VvfZPx7lyg=",
        "}A@&z",
        "#=qtRuLPG6CownVXpQS2Jma6EmxR$R$u15FKPRjOSzCUIw=",
        "-*& r ",
        "#=q6k7flm9GMlPIija7ZH1xJg==",
        "UnhandledExceptionEventArgs",
        "#=qbLBIoIXYNfJl3x9LHqBWNA==",
        "#=q9RHjNFjnLkbqjNKidtUNeAGLmByWXgbKwjLfhcq9NOc=",
        "List`1",
        "AssemblyCopyrightAttribute",
        "#=q0U3u45cUl83Kicjfx0RmVA==",
        "#=q9T406SLBpfhYfDTkCrB28g==",
        "#=qO0bmWYqIZnaB7Udo1OTvUuiP36Q9Z_7hz6URm1Yr1hM=",
        "#=qibDx9sEkAVZroec7HmNu4g==",
        "'Xg3U[",
        "4System.Web.Services.Protocols.SoapHttpClientProtocol",
        "#=q6V4Kle56uZFNUY$zkrrKJQ==",
        "ToByteArray",
        "ICryptoTransform",
        "#=qzDzg9a$HVGG1G5cdhqbdwO3OG_SFijGXN8Towa37$TQ=",
        "#=qd4_A7Y1qGQ8QAgHfK8_ssQ==",
        "#=q3qYAJGveL_cxux6_2m4Vaw==",
        "TryParse",
        "#=qDB62T9X0iP_6WNTXOuwQnA==",
        "PipeClosed",
        "#=q8eJA0L4q0RMnuOJCvpFj3133vZRxVnxvHST9vysUWYQ=",
        "Array",
        "Microsoft.VisualBasic.ApplicationServices",
        "#=qpQiSeXaCc6qGNX49vDbcMYyzv_UpV$YoUyrH0l6FW6Q="
      ],
      "virustotal": {
        "error": true,
        "msg": "VT File lookup disabled in processing.conf"
      },
      "executed_tools": [
        "overlay",
        "msi_extract",
        "kixtart_extract",
        "vbe_extract",
        "batch_extract",
        "UnAutoIt_extract",
        "UPX_unpack",
        "RarSFX_extract",
        "Inno_extract",
        "SevenZip_unpack",
        "de4dot_deobfuscate",
        "eziriz_deobfuscate",
        "office_one"
      ],
      "cape_type_code": 0,
      "cape_type": "NanoCore Payload: 32-bit executable"
    }
  },
  "detections": [
    {
      "family": "NanoCore",
      "details": [
        {
          "Yara": "91d880890f6e481edcbe0c5a1a26e8b343d2abeaf4d8c62de04bc75aea6aa7d4"
        },
        {
          "Behavior": ""
        }
      ]
    }
  ],
  "procdump": [
    {
      "name": "6d95dd6c471c315727e5b1d79e30acaca576e76c5174d935c0bd542ce56cfe19",
      "path": "/opt/CAPEv2/storage/analyses/46/procdump/6d95dd6c471c315727e5b1d79e30acaca576e76c5174d935c0bd542ce56cfe19",
      "guest_paths": "1;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?",
      "size": 91136,
      "crc32": "F2D4B8CB",
      "md5": "c1c6d242f0f1e17b17a4563607c4a1a9",
      "sha1": "47ca487f6412032d6159d410bd6befe5c45cd2da",
      "sha256": "6d95dd6c471c315727e5b1d79e30acaca576e76c5174d935c0bd542ce56cfe19",
      "sha512": "199dc628678af3f445b516dbeae1d7c57ea131495d5d92c4dcc6b3669b843b8b4a85f4e7b771d1cfb78b72f433fc4b1ed1e214ca90c4d0808df9693602fe0d17",
      "rh_hash": null,
      "ssdeep": "1536:RKPz7k++AEO/xWYxkJtUyTfkhvI7cec9Afxd64RPtqnYJejEJehe/T49:RKPz4lO/0RnUyTfmI7rVxdBtqYVJeA7",
      "type": "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows",
      "yara": [
        {
          "name": "IsPE32",
          "meta": {},
          "strings": [],
          "addresses": {}
        },
        {
          "name": "IsWindowsGUI",
          "meta": {},
          "strings": [],
          "addresses": {}
        },
        {
          "name": "IsPacked",
          "meta": {
            "description": "Entropy Check"
          },
          "strings": [],
          "addresses": {}
        }
      ],
      "cape_yara": [],
      "clamav": [],
      "tlsh": "T1199312C033AA2EF5CD1253B911E3329965DA523D7256C6728FC9FF022CC13863A5A7C9",
      "sha3_384": "db32e6992294a160c0b40277477d53c39f6a0c2dbf5102052a3909b945634fa8dc0fa2ee91bfd7b78629575e4123ef53",
      "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
      "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
      "pe": {
        "guest_signers": {
          "aux_sha1": null,
          "aux_timestamp": null,
          "aux_valid": false,
          "aux_error": true,
          "aux_error_desc": "No signature found.",
          "aux_signers": []
        },
        "digital_signers": [],
        "imagebase": "0x00400000",
        "entrypoint": "0x0001e792",
        "ep_bytes": "",
        "peid_signatures": null,
        "reported_checksum": "0x00000000",
        "actual_checksum": "0x00016d09",
        "osversion": "4.0",
        "machine_type": "IMAGE_FILE_MACHINE_I386",
        "pdbpath": null,
        "imports": {},
        "exported_dll_name": null,
        "exports": [],
        "dirents": [
          {
            "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
            "virtual_address": "0x0001e738",
            "size": "0x00000057"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
            "virtual_address": "0x00022000",
            "size": "0x00015dcc"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
            "virtual_address": "0x00020000",
            "size": "0x0000000c"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_TLS",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_IAT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
            "virtual_address": "0x00002008",
            "size": "0x00000048"
          },
          {
            "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
            "virtual_address": "0x00000000",
            "size": "0x00000000"
          }
        ],
        "sections": [
          {
            "name": ".text",
            "raw_address": "0x00000400",
            "virtual_address": "0x00002000",
            "virtual_size": "0x0001e000",
            "size_of_data": "0x00000000",
            "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
            "characteristics_raw": "0xe0000020",
            "entropy": "0.00"
          },
          {
            "name": ".reloc",
            "raw_address": "0x00000400",
            "virtual_address": "0x00020000",
            "virtual_size": "0x00002000",
            "size_of_data": "0x00000000",
            "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
            "characteristics_raw": "0x42000040",
            "entropy": "0.00"
          },
          {
            "name": ".rsrc",
            "raw_address": "0x00000400",
            "virtual_address": "0x00022000",
            "virtual_size": "0x00016000",
            "size_of_data": "0x00016000",
            "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
            "characteristics_raw": "0x40000040",
            "entropy": "7.99"
          }
        ],
        "overlay": null,
        "resources": [
          {
            "name": "RT_RCDATA",
            "offset": "0x000220a0",
            "size": "0x00015d18",
            "filetype": null,
            "language": "LANG_NEUTRAL",
            "sublanguage": "SUBLANG_NEUTRAL",
            "entropy": "8.00"
          },
          {
            "name": "RT_GROUP_ICON",
            "offset": "0x00037db8",
            "size": "0x00000014",
            "filetype": null,
            "language": "LANG_NEUTRAL",
            "sublanguage": "SUBLANG_NEUTRAL",
            "entropy": "3.40"
          }
        ],
        "versioninfo": [],
        "imphash": "",
        "timestamp": "2015-02-22 00:49:37",
        "icon": null,
        "icon_hash": null,
        "icon_fuzzy": null,
        "icon_dhash": null
      },
      "data": null,
      "strings": [
        "2\\PSL!",
        "0csX=",
        "0z-a6",
        "pd.ir/",
        "5$\",q",
        "W3cuP",
        "%2n` ",
        "GN%UI'?",
        ")]}8$j7",
        "]g0\\c",
        "FdJJB",
        "maH/q",
        "Wh*RJ",
        "vGUgS_",
        "r#$S-u",
        "$\\2N(",
        "y;j;Qq",
        "B%S:0",
        "!ZKuwt",
        "N?#H\\\\\"",
        "B1rI2",
        "qY7u%",
        "L5J9Zm",
        ".(oGu",
        "N8[I=",
        "-|{F+!",
        "2#cKX",
        "EL<s@",
        "Pl3SrvO",
        "$IqT4x",
        "^2G&d",
        "6Im'@B",
        "YAo|z",
        "B##|L",
        "hpF/8h",
        ".text",
        "P%GMJ ",
        "mwT%'",
        "4fN]6",
        "Rar:f",
        "Q01x~",
        "P!|yhg",
        "h\"Nv<]c]'",
        "sZjGi",
        "l!$ J",
        "PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD",
        "WGa57",
        "yp~7}5",
        "2(|Ht",
        "Ec-D+",
        "QyDyF",
        "~q)-Aa",
        "MHRi'",
        "N-zQ?",
        "I=VOEQ",
        "A%CdJ",
        "@A[]%",
        "{uT,;",
        "k6~$|",
        "r;< L",
        "Rk%S(V",
        "[[s\\3",
        "ELix/",
        "D0E=Z",
        "GEe!c",
        "7S{$I",
        "';Tej^",
        "Gg :7",
        "(L^%a",
        "B[%3=k",
        "jz7aUP",
        "k4 dv",
        "Acof;",
        "g<fE$t",
        "7dEt7]",
        "CaaVu",
        "9x}'J",
        "L6&.x'-b\\",
        "tL/qQH",
        "S8>G[r",
        ";W;dP",
        "wyww_",
        "szVTe",
        "x&K5lb",
        "fqz7@+",
        "X.6t%",
        "cPy.iq",
        "&c{'u",
        "7|e9't3",
        "h-uZo",
        "VegZ'#8Y",
        "B/ (h",
        ">_<!u",
        "A}p8K5o",
        "OAZ7P6",
        "GY]R^",
        "}(K_3",
        "*jWtr>g",
        "t,3!0",
        "I!4M&",
        "~BXV9C",
        "w0%OC",
        "Qa\"Kr",
        "Yn8fR",
        "07LJ)",
        "|mOLU%",
        "t!\\4=",
        "GC'A/F",
        "@PC,~+tfdo]a",
        "t'G||",
        "/:?MJ",
        "fML2;s.",
        "Ir]$T",
        ":W40!",
        "9e!!XmH",
        "z}m+2",
        "-LF6{",
        "Ev\"7V",
        "d|x0_^UV",
        "wO^@3",
        "1M2/a",
        "<v7F:",
        "cg\"`f",
        "HrDOu",
        "SU+oS1}<",
        "kE8a1",
        "+u^Di?",
        "Sk}_l-",
        "[6}7r",
        "XGzdJ",
        "8 @=,4",
        "2F]QS",
        "zR9}G!",
        "nS2ZZ",
        "cU1rK",
        "aLk|W",
        "aYc9x",
        "~s)gxn",
        "<%h`:",
        "9'imFT",
        "\"N$9#",
        "PS@VO",
        "vV@N#",
        "\"G>g{n",
        "p:J%,AJ",
        "XQ/+}$",
        "7Np`=&",
        "Bu=V&",
        "~v]_yWs",
        "^WFm0",
        "dk-WME",
        "0*%iT",
        "*LD\\!",
        "!This program cannot be run in DOS mode.",
        "8ah J|P]m",
        "kJbP/",
        "ob+zx",
        "r'\\txqY",
        "%W>(G",
        ";}6g-",
        "]a|1QD<",
        "Lq0M%sE",
        "twOk[",
        "bEpVvV",
        "?}_qu",
        "o7.<#",
        ";|:>_",
        "CdX}g",
        ")a3O)",
        "sLP:w5",
        "T\"({Qls",
        "DeLGJ",
        "U>HKh",
        "QI(D6",
        ",q6o&",
        "JqQM!",
        "[1A@%",
        "QL-f:",
        "b-f.1M",
        "Gv1\\y",
        "dm(Vn",
        "$64}!",
        "G')UL",
        "Wj?%+",
        ".reloc",
        "RDLXukk0",
        "Z118N",
        "CttEg(",
        "uYt2H",
        "2XgO\"P",
        "CFZ5X",
        "9{i74",
        "/==du",
        "u]Lq3",
        "b='C=",
        "#stAIq",
        "/@I76",
        "=sG>BE",
        "S'Wr]b\\M[W",
        "%XCr)+",
        "G-(!}[",
        "w@Ki\"6",
        "1.e.I?R",
        "@Lt^GR<",
        "!MXtjppG_",
        "VbF>)f}2/Qo0",
        "(K(s2+O",
        "*Mx2#",
        "w,m~+",
        "Od$fz",
        "kZ58D",
        "Y3JhHK",
        "0zr:Q",
        "l:KXFnc",
        "cqF/u",
        "z'7iF",
        "kd+Zc0<",
        "Qh:C;g",
        "9+=Zi",
        "cs8:t1O",
        "uTL=\"r7",
        "Gd6Y}63",
        "tlW%7",
        "wUFU\\",
        "@CLg#",
        "X8St?",
        "GtXAv",
        "t]0R#",
        "J@yz[X",
        "O)0m%",
        "/%RQy",
        "EI6AX",
        "_\"QS$8",
        "8gxrZ",
        "<7gc3y",
        "raGy_",
        "x_ddRR",
        "e>!q9",
        "E9Hos",
        "5P^Fd",
        "MuCG@",
        "wBXu ",
        "\\GR3/",
        "TxW\\u",
        ".0`r.",
        "nq]iG",
        "Y=)Bb{ ?Y",
        "dE,1%",
        "K*$ T",
        "9dmG ",
        "gD];mED",
        "m<pb#",
        ">Tzn8",
        "g2pBuG",
        ":9 y`D",
        "Tol{@]",
        "=wR*\\",
        "q9t;IK",
        "ZPM:3",
        "RNUt#",
        "gXtD[",
        "+7d8r",
        "`eaWZ",
        "h|iw1",
        "jfk/43",
        "cJOd.",
        "mYMn|",
        "w5~~O",
        "=KTe8",
        "!LWL)",
        "V53W-",
        "LXHi&",
        "&oI#3",
        "D.~Hk",
        "|W[bO",
        "8{=|y,I",
        "P!HugQ?[",
        "`TC$c",
        "it0^s",
        ")`].mt",
        "pHR`z",
        "S& B!",
        "G<o*I",
        " Toh0Mi",
        "OCiQ\"dN1",
        "QSks3",
        "n*kWBzj",
        "Pw*H}",
        "12BT{y",
        " wst(",
        "z~$TI",
        "?dm~t",
        "pTn([/",
        "3aHsY3",
        "-w)yS6",
        "5=\\\"x=",
        ">T2p,",
        "d;<kX",
        "a+t]R",
        "z#-C~",
        "B.rsrc",
        "uHPLZI8",
        "l.|jy",
        "kJLZ)~",
        "^;d18N",
        "XZjjn0e",
        "FC^\"7",
        "34wM3",
        "T#M6g%",
        "xL;ssv",
        "dpi8t",
        "~`Il3@=",
        "/voo:",
        "fpr=&",
        "urF~a",
        "fKOhJe",
        "3of*>p",
        "g;d0 ",
        "a/K6,",
        "\\;-_b",
        "AL7M[MM",
        "VCd|P",
        "$m`|'",
        "p4LPh",
        "U)~R8",
        "z5LIw9",
        "Xr},e",
        "j:.M*F",
        "9+,Yf",
        "^XpV}A",
        "-JJ_o~",
        "]h^TA",
        "?85!y",
        "D>-[l",
        "FyhDN",
        "oRzq=",
        "A3Q3g",
        " 1UcF",
        "6hl zb@",
        "_'5-_",
        "'ljSt",
        "z!+Kd",
        "7kc#,O6B",
        "/!p 8",
        "W;Est*",
        "+idwV7V&",
        "\"qE0K",
        "g,HbD",
        ";Gt3Aa",
        "PliMBG",
        "*-Han",
        "e[{ho",
        "V8/HKj",
        "BVzl]",
        "qN<|8",
        "q]`sp",
        "tWin32Error",
        "L9$t#1",
        "G5Y>K",
        "!G,iU",
        "H!Y5u",
        "&Z;1()",
        "kVKc ",
        "SU>)MP",
        "T D #",
        "#@\"E<!",
        "B*` B",
        "j<}3N\\",
        "!uE:_",
        "b'^-e=9",
        "3}/,V",
        "dv\"8F",
        "p8q^Vd",
        "L=yXP ",
        "a,CQYP",
        "z2TgP=",
        "f});o",
        "*rEi/",
        "d:Y0i",
        "rAZ$M",
        "}48{w",
        "}A@&z",
        "u`pyK",
        "5T9Mv",
        "|,RA/",
        "er|E0.a",
        "H(S97>Q",
        "6$l^b",
        "'Xg3U[",
        "/mKGH",
        "9k% >",
        "`jf|*B",
        "F)&*f",
        "V/FBx"
      ],
      "virustotal": {
        "error": true,
        "msg": "VT File lookup disabled in processing.conf"
      },
      "executed_tools": [
        "overlay",
        "msi_extract",
        "kixtart_extract",
        "vbe_extract",
        "batch_extract",
        "UnAutoIt_extract",
        "UPX_unpack",
        "RarSFX_extract",
        "Inno_extract",
        "SevenZip_unpack",
        "de4dot_deobfuscate",
        "eziriz_deobfuscate",
        "office_one"
      ],
      "cape_type_code": 1,
      "cape_type": "",
      "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
      "process_name": "91d880890f6e481edcbe.exe",
      "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
      "pid": 6484
    }
  ],
  "dropped": [
    {
      "name": [
        "client.log"
      ],
      "path": "/opt/CAPEv2/storage/analyses/46/files/a99c2ec934ef9cb0931cbd3f858f8f3f682453861c87fd7b0fba2913e8961fc4",
      "guest_paths": [
        "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
      ],
      "size": 20773,
      "crc32": "ED50E757",
      "md5": "51a2c8944bc5aa530b1f114078fea319",
      "sha1": "2aa3142eac45b4787e119ff267df09ad82f4f541",
      "sha256": "a99c2ec934ef9cb0931cbd3f858f8f3f682453861c87fd7b0fba2913e8961fc4",
      "sha512": "09ee1de984c1623f8f0ab61a6b129b76d5885d74e97933c2846da2b37fd08dd7c32ed7313b649d8ce67cb1387af1a13a406b9c846f6d6da5c2a66cee3b46ed95",
      "rh_hash": null,
      "ssdeep": "384:egntBstKzEczEczEcnEhzEhzEhzEczEczEcnEhzEhzEhzEczEczENTL9uL9uL9uG:egvnTTT6mmTTT6mmTT2NooFFFNooFFFp",
      "type": "Unicode text, UTF-8 text, with CRLF line terminators",
      "yara": [],
      "cape_yara": [],
      "clamav": [],
      "tlsh": "T13F92AF22B30630641A1150E1C9519708F9E0D56B7B1BA51308CCA6EF6BB36F5E37FDAE",
      "sha3_384": "39ed8af023bb4f17f11d9b7098a1d065535e5507368f6d7c211b95b095a36b9a82e2a53e6b6e25b5f0f1ac861e0670e9",
      "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
      "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
      "data": "\n25 \\x430\\x43f\\x440\\x435\\x43b\\x44f 2026 \\x433.\n\n9:56: Builder settings loaded..\n9:56: KeyboardLogging = True\n9:56: BuildTime = 25.04.2026 9:02:11\n9:56: Version = 1.2.2.0\n9:56: Mutex = 80a8cf76-041f-4f9a-8ed2-2be59774b180\n9:56: DefaultGroup = BBC News\n9:56: PrimaryConnectionHost = bbc.in.net\n9:56: BackupConnectionHost = syashop.uk.com\n9:56: ConnectionPort = 443\n9:56: RunOnStartup = True\n9:56: RequestElevation = True\n9:56: BypassUserAccountControl = False\n9:56: ClearZoneIdentifier = True\n9:56: ClearAccessControl = True\n9:56: SetCriticalProcess = False\n9:56: PreventSystemSleep = True\n9:56: ActivateAwayMode = True\n9:56: EnableDebugMode = True\n9:56: RunDelay = 0\n9:56: ConnectDelay = 4000\n9:56: RestartDelay = 5000\n9:56: TimeoutInterval = 5000\n9:56: KeepAliveTimeout = 30000\n9:56: MutexTimeout = 5000\n9:56: LanTimeout = 2500\n9:56: WanTimeout = 8000\n9:56: BufferSize = 65535\n9:56: MaxPacketSize = 10485760\n9:56: GCThreshold = 10485760\n9:56: \n9:56: Client Exception (DeleteUserStartup):\n9:56: \\x41d\\x435 \\x443\\x434\\x430\\x43b\\x43e\\x441\\x44c \\x43d\\x430\\x439\\x442\\x438 \\x447\\x430\\x441\\x442\\x44c \\x43f\\x443\\x442\\x438 \"C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\NAT Subsystem\\natss.exe\".    \\x432 System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)\n   \\x432 System.IO.File.Delete(String path)\n   \\x432 #=qjIje6jGWLd2EOkfZXKqBbg==.#=qJqkjp9g96yoxpNS2E$BC00FKleto7dZfN9N5mtLDF4g=()\n9:56: \n9:56: Reading client settings from 'settings.bin'..\n9:56: \n9:56: Client Exception (LoadSettings):\n9:56: Settings file 'settings.bin' could not be found.    \\x432 #=qjIje6jGWLd2EOkfZXKqBbg==.#=qRxR4aJg8TX8oM$OpeoviZQ==(String #=q2n0wwv9OpsrMrxVUVHoqGw==)\n9:56: \n9:56: Reading client settings from 'settings.bak'..\n9:56: \n9:56: Client Exception (LoadSettings):\n9:56: Settings file 'settings.bak' could not be found.    \\x432 #=qjIje6jGWLd2EOkfZXKqBbg==.#=qRxR4aJg8TX8oM$OpeoviZQ==(String #=q2n0wwv9OpsrMrxVUVHoqGw==)\n9:56: \n9:56: Initializing cached plugins..\n9:56: Plugin: SurveillanceEx Plugin, Cache: True\n9:56: Rebuilding host cache..\n9:56: Host: bbc.in.net\n9:56: Host: syashop.uk.com\n9:56: Connecting to bbc.in.net:443..\n9:56: Resolved hostname 'bbc.in.net' to '172.67.147.249'\n9:56: Connection established.\n9:56: \n9:56: Client Exception ():\n9:56: Packet size exceeds MaxPacketSize.\n9:56: \n9:56: Disconnected from remote host.\n9:56: \n9:56: Client Exception ():\n9:56: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:56: \n9:56: Connecting to bbc.in.net:443..\n9:56: Resolved hostname 'bbc.in.net' to '172.67.147.249'\n9:56: Connection established.\n9:56: \n9:56: Client Exception ():\n9:56: Packet size must be greater than 0.\n9:56: \n9:56: Disconnected from remote host.\n9:56: \n9:56: Client Exception ():\n9:56: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:56: \n9:57: Connecting to bbc.in.net:443..\n9:57: Resolved hostname 'bbc.in.net' to '172.67.147.249'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:57: \n9:57: Connecting to syashop.uk.com:443..\n9:57: Resolved hostname 'syashop.uk.com' to '172.67.178.110'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:57: \n9:57: Connecting to syashop.uk.com:443..\n9:57: Resolved hostname 'syashop.uk.com' to '172.67.178.110'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:57: \n9:57: Connecting to syashop.uk.com:443..\n9:57: Resolved hostname 'syashop.uk.com' to '172.67.178.110'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Rebuilding host cache..\n9:57: Host: bbc.in.net\n9:57: Host: syashop.uk.com\n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:57: \n9:57: Connecting to bbc.in.net:443..\n9:57: Resolved hostname 'bbc.in.net' to '172.67.147.249'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:57: \n9:57: Connecting to bbc.in.net:443..\n9:57: Resolved hostname 'bbc.in.net' to '172.67.147.249'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:57: \n9:57: Connecting to bbc.in.net:443..\n9:57: Resolved hostname 'bbc.in.net' to '172.67.147.249'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x43c\\x43f\\x43b\\x44f\\x440\\x435 \\x43e\\x431\\x44a\\x435\\x43a\\x442\\x430 \\x43d\\x435 \\x437\\x430\\x434\\x430\\x43d\\x430 \\x441\\x441\\x44b\\x43b\\x43a\\x430 \\x43d\\x430 \\x43e\\x431\\x44a\\x435\\x43a\\x442.    \\x432 Client.#=quebj1wBCmruzAKmg6Y4Igg==(Object #=qHj$POo$6pkhWHVC5cES_2g==, SocketAsyncEventArgs #=q_ux9H7Sh7a2A98b6QB8m4w==)\n9:57: \n9:57: Connecting to syashop.uk.com:443..\n9:57: Resolved hostname 'syashop.uk.com' to '172.67.178.110'\n9:57: Connection established.\n9:57: \n9:57: Client Exception ():\n9:57: Packet size must be greater than 0.\n9:57: \n9:57: Disconnected from remote host.\n9:57: \n9:57: Client Exception ():\n9:57: \\x412 \\x44d\\x43a\\x437\\x435\\x4",
      "strings": [],
      "virustotal": {
        "error": true,
        "msg": "VT File lookup disabled in processing.conf"
      },
      "executed_tools": [
        "overlay",
        "msi_extract",
        "kixtart_extract",
        "vbe_extract",
        "batch_extract",
        "UnAutoIt_extract",
        "UPX_unpack",
        "RarSFX_extract",
        "Inno_extract",
        "SevenZip_unpack",
        "de4dot_deobfuscate",
        "eziriz_deobfuscate",
        "office_one"
      ],
      "cape_type_code": 0,
      "cape_type": "",
      "pid": 6484
    },
    {
      "name": [
        "run.dat"
      ],
      "path": "/opt/CAPEv2/storage/analyses/46/files/67302b422117ed46990861bae7ce25023b9076211976eab8f365efecc634799d",
      "guest_paths": [
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat"
      ],
      "size": 8,
      "crc32": "F98EB58A",
      "md5": "bf4d3e5fc57ecf2a22a67c42a94a4c3c",
      "sha1": "d77a28c175bbfa1e3a8164b7b97186d0441a147a",
      "sha256": "67302b422117ed46990861bae7ce25023b9076211976eab8f365efecc634799d",
      "sha512": "38a4682f2d18d75ba1d5258691b988522283c0a8141e26fa7bcf8521d603f67b2e36c6160bafac5241681e08f3f3743c5c2891001e5be4299d793a6226a069cd",
      "rh_hash": null,
      "ssdeep": "3:/J:x",
      "type": "Non-ISO extended-ASCII text, with no line terminators",
      "yara": [],
      "cape_yara": [],
      "clamav": [],
      "tlsh": null,
      "sha3_384": "8430d84ab47371de323cc8e0fdedd1973412d20aa8ee6cf06630b5f0f1bde10b3a6e428950469c675271a8f53dd2d358",
      "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
      "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
      "data": "à÷èȗ¢ÞH",
      "strings": [],
      "virustotal": {
        "error": true,
        "msg": "VT File lookup disabled in processing.conf"
      },
      "executed_tools": [
        "overlay",
        "msi_extract",
        "kixtart_extract",
        "vbe_extract",
        "batch_extract",
        "UnAutoIt_extract",
        "UPX_unpack",
        "RarSFX_extract",
        "Inno_extract",
        "SevenZip_unpack",
        "de4dot_deobfuscate",
        "eziriz_deobfuscate",
        "office_one"
      ],
      "cape_type_code": 0,
      "cape_type": "",
      "pid": 6484
    }
  ],
  "CAPE": {
    "payloads": [
      {
        "name": "e80dcbee37f3881c3405857c3eb3c0bc117b40c7acb794ebf6c8083d8840eab7",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/e80dcbee37f3881c3405857c3eb3c0bc117b40c7acb794ebf6c8083d8840eab7",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x0288A000;?",
        "size": 354,
        "crc32": "C63D3C97",
        "md5": "8c3e178364a3e6bd7b6772e9a92d0a9a",
        "sha1": "45a393937bc030a11b7ae89cfbfe514d4d4fc76d",
        "sha256": "e80dcbee37f3881c3405857c3eb3c0bc117b40c7acb794ebf6c8083d8840eab7",
        "sha512": "455d8c1c646bbc28054f806baa24897611786cee19cb161acb71bfbd9e71aada9a6682018c8af41e67e8a2455719e1e0c6979bc4f6bcf029594c2775b7ff7e8d",
        "rh_hash": null,
        "ssdeep": "6:lx2+lOHTi5pS2bPblM/4KpWArUo2t9ZzJeCXU:lXAYZPbu/4KpWQS9Z94",
        "type": "Matlab v4 mat-file (little endian) 3, numeric, rows 42508288, columns 8192",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T1BDE0CD17134402FACC59D6BB192FD3A7DE8C012D61B86686CB3D9067383A6E85011110",
        "sha3_384": "06f9824c6f19217bf5c0b47ca139540feefd6eb8a017512a822f50c23b9e52fbd30086aa770dab814b02359a1f85798b",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [
          "PRh`9xsUSVW",
          "xsUSVW"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x0288A000"
      },
      {
        "name": "61e9d5c0727665e9ef3f328141397be47c65ed11ab621c644b5bbf1d67138403",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/61e9d5c0727665e9ef3f328141397be47c65ed11ab621c644b5bbf1d67138403",
        "guest_paths": "8;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x07CC0000;?",
        "size": 19968,
        "crc32": "BE3B83AB",
        "md5": "bdc8945f1d799c845408522e372d1dbd",
        "sha1": "874b7c3c97cc5b13b9dd172fec5a54bc1f258005",
        "sha256": "61e9d5c0727665e9ef3f328141397be47c65ed11ab621c644b5bbf1d67138403",
        "sha512": "4fa0ed4ef66e4c442f5fc628e8bfc8a4f84cb213210643996d9387027edb619c054f6104ac889ae77cece09f0304f95d5f20e14d66847e2d382ef51eecec0962",
        "rh_hash": null,
        "ssdeep": "192:VYLQui6h6p5WW3tZVTnlYJL/eLYLTr2/C8:VYLQu/6/fKqLYLTR",
        "type": "PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows",
        "yara": [
          {
            "name": "DITEKSHEN_MALWARE_Win_Nanocore",
            "meta": {
              "description": "Detects NanoCore",
              "author": "ditekSHen",
              "id": "931b98f6-df2b-538b-bc49-ecbbd24334da",
              "date": "2020-11-06",
              "modified": "2024-11-01",
              "reference": "https://github.com/ditekshen/detection",
              "source_url": "https://github.com/ditekshen/detection/blob/e76c93dcdedff04076380ffc60ea54e45b313635/yara/malware.yar#L7654-L7681",
              "license_url": "https://github.com/ditekshen/detection/blob/e76c93dcdedff04076380ffc60ea54e45b313635/LICENSE.txt",
              "logic_hash": "6336260e0af2b4b51338ee066f41b7c58aa134a6c03ca110db7e088edf2b65a7",
              "score": 75,
              "quality": 75,
              "tags": "FILE"
            },
            "strings": [
              "NanoCore.ClientPlugin",
              "NanoCore.ClientPluginHost",
              "IClientApp",
              "IClientData",
              "IClientNetwork",
              "IClientAppHost",
              "IClientDataHost",
              "IClientLoggingHost",
              "IClientNetworkHost",
              "IClientUIHost",
              "IClientNameObjectCollection",
              "IClientReadOnlyNameObjectCollection",
              "ClientPlugin",
              "get_ClientSettings",
              "get_Connected"
            ],
            "addresses": {
              "x2": 3640,
              "x3": 3701,
              "i1": 3674,
              "i2": 3662,
              "i3": 3625,
              "i4": 3779,
              "i5": 3685,
              "i6": 3760,
              "i7": 3727,
              "i8": 3746,
              "i9": 3794,
              "i10": 3831,
              "s1": 6025,
              "s6": 4601,
              "s7": 4681
            }
          },
          {
            "name": "Windows_Trojan_Nanocore_d8c4e3c5",
            "meta": {
              "author": "Elastic Security",
              "id": "d8c4e3c5-8bcc-43d2-9104-fa3774282da5",
              "fingerprint": "e5c284f14c1c650ef8ddd7caf314f5318e46a811addc2af5e70890390c7307d4",
              "creation_date": "2021-06-13",
              "last_modified": "2021-08-23",
              "threat_name": "Windows.Trojan.Nanocore",
              "reference_sample": "b2262126a955e306dc68487333394dc08c4fbd708a19afeb531f58916ddb1cfd",
              "severity": 100,
              "arch_context": "x86, arm64",
              "scan_context": "file, memory",
              "license": "Elastic License v2",
              "os": "windows"
            },
            "strings": [
              "NanoCore.ClientPluginHost",
              "NanoCore.ClientPlugin",
              "get_BuilderSettings",
              "IClientAppHost",
              "AddHostEntry",
              "LogClientException",
              "PipeExists",
              "IClientLoggingHost"
            ],
            "addresses": {
              "a1": 3701,
              "a2": 3640,
              "b1": 4620,
              "b4": 3779,
              "b6": 4733,
              "b7": 4844,
              "b8": 4705,
              "b9": 3760
            }
          },
          {
            "name": "Nanocore_RAT_Gen_2",
            "meta": {
              "description": "Detetcs the Nanocore RAT",
              "author": "Florian Roth",
              "score": 100,
              "reference": "https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/",
              "date": "2016-04-22",
              "hash1": "755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050"
            },
            "strings": [
              "NanoCore.ClientPluginHost",
              "IClientNetworkHost"
            ],
            "addresses": {
              "x1": 3701,
              "x2": 3727
            }
          },
          {
            "name": "NETDLLMicrosoft",
            "meta": {
              "author": "malware-lu"
            },
            "strings": [
              "{ 00 00 00 00 00 00 00 00 5F 43 6F 72 44 6C 6C 4D 61 69 6E 00 6D 73 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 }"
            ],
            "addresses": {
              "a0": 6858
            }
          },
          {
            "name": "IsPE32",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsNET_DLL",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsDLL",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsWindowsGUI",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "Microsoft_Visual_Studio_NET",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 6894
            }
          },
          {
            "name": "Microsoft_Visual_C_v70_Basic_NET_additional",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 6894
            }
          },
          {
            "name": "Microsoft_Visual_C_Basic_NET",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "b": 6894
            }
          },
          {
            "name": "Microsoft_Visual_Studio_NET_additional",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 6894
            }
          },
          {
            "name": "Microsoft_Visual_C_v70_Basic_NET",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "b": 6894
            }
          },
          {
            "name": "NET_executable_",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 6894
            }
          },
          {
            "name": "NET_executable",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "b": 6894
            }
          }
        ],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T1CA924D1362CE7DE6E5B916303B3387C1C72DDE041653DA2E16D87629E97E2833A523D8",
        "sha3_384": "34e76812c5bbcc4e39114f9560b049a9e8ac0f74800b55f33641134edf5dfb32ff8a420a55be3ca4c294e8d1f69db255",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "pe": {
          "guest_signers": {
            "aux_sha1": null,
            "aux_timestamp": null,
            "aux_valid": false,
            "aux_error": true,
            "aux_error_desc": "No signature found.",
            "aux_signers": []
          },
          "digital_signers": [],
          "imagebase": "0x00400000",
          "entrypoint": "0x000038ee",
          "ep_bytes": "ff250020400000000000000000000000",
          "peid_signatures": null,
          "reported_checksum": "0x00000000",
          "actual_checksum": "0x0000721e",
          "osversion": "4.0",
          "machine_type": "IMAGE_FILE_MACHINE_I386",
          "pdbpath": null,
          "imports": {
            "mscoree": {
              "dll": "mscoree.dll",
              "imports": [
                {
                  "address": "0x402000",
                  "name": "_CorDllMain"
                }
              ]
            }
          },
          "exported_dll_name": null,
          "exports": [],
          "dirents": [
            {
              "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
              "virtual_address": "0x0000389c",
              "size": "0x0000004f"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
              "virtual_address": "0x00004000",
              "size": "0x00002f58"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
              "virtual_address": "0x00008000",
              "size": "0x0000000c"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_TLS",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_IAT",
              "virtual_address": "0x00002000",
              "size": "0x00000008"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
              "virtual_address": "0x00002008",
              "size": "0x00000048"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            }
          ],
          "sections": [
            {
              "name": ".text",
              "raw_address": "0x00000200",
              "virtual_address": "0x00002000",
              "virtual_size": "0x000018f4",
              "size_of_data": "0x00001a00",
              "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x60000020",
              "entropy": "5.26"
            },
            {
              "name": ".rsrc",
              "raw_address": "0x00001c00",
              "virtual_address": "0x00004000",
              "virtual_size": "0x00002f58",
              "size_of_data": "0x00003000",
              "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x40000040",
              "entropy": "3.31"
            },
            {
              "name": ".reloc",
              "raw_address": "0x00004c00",
              "virtual_address": "0x00008000",
              "virtual_size": "0x0000000c",
              "size_of_data": "0x00000200",
              "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x42000040",
              "entropy": "0.08"
            }
          ],
          "overlay": null,
          "resources": [
            {
              "name": "RT_ICON",
              "offset": "0x00004468",
              "size": "0x000002e8",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "1.71"
            },
            {
              "name": "RT_ICON",
              "offset": "0x00004750",
              "size": "0x00000128",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.08"
            },
            {
              "name": "RT_ICON",
              "offset": "0x00004878",
              "size": "0x000008a8",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "1.72"
            },
            {
              "name": "RT_ICON",
              "offset": "0x00005120",
              "size": "0x00000568",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "1.05"
            },
            {
              "name": "RT_ICON",
              "offset": "0x00005688",
              "size": "0x00000353",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "4.05"
            },
            {
              "name": "RT_ICON",
              "offset": "0x000059e0",
              "size": "0x000010a8",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.72"
            },
            {
              "name": "RT_ICON",
              "offset": "0x00006a88",
              "size": "0x00000468",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.76"
            },
            {
              "name": "RT_GROUP_ICON",
              "offset": "0x00006ef0",
              "size": "0x00000068",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.69"
            },
            {
              "name": "RT_VERSION",
              "offset": "0x00004208",
              "size": "0x0000025c",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "3.23"
            }
          ],
          "versioninfo": [
            {
              "name": "Translation",
              "value": "0x0000 0x04b0"
            },
            {
              "name": "FileDescription",
              "value": " "
            },
            {
              "name": "FileVersion",
              "value": "1.2.0.0"
            },
            {
              "name": "InternalName",
              "value": "ClientPlugin.dll"
            },
            {
              "name": "LegalCopyright",
              "value": " "
            },
            {
              "name": "OriginalFilename",
              "value": "ClientPlugin.dll"
            },
            {
              "name": "ProductVersion",
              "value": "1.2.0.0"
            },
            {
              "name": "Assembly Version",
              "value": "1.2.0.0"
            }
          ],
          "imphash": "dae02f32a21e03ce65412f6e56942daa",
          "timestamp": "2014-11-23 01:09:01",
          "icon": "iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAY0lEQVR4nO3XIQ6AMBBE0YH0eGuAcwKmZ1sLCkHRZUj4o9qaeVmzqfT3DJl5OAGjs1ySynWIiFeLa62SPjABAABK+7Cte9fCeZlud/sEAAAAAAAAADvgsY7bddk79gnwMSH2nLDUDvNx5OJLAAAAAElFTkSuQmCC",
          "icon_hash": "f66c7c86e9ab59ef3f289acd613a3738",
          "icon_fuzzy": "c3ca946d749a15ad18efd3e5d7b0d8f5",
          "icon_dhash": "454545d4d4d44503",
          "imported_dll_count": 1
        },
        "data": null,
        "strings": [
          "System.CodeDom.Compiler",
          "get_ClientSettings",
          "RestoreProtection",
          "mscoree.dll",
          "EntryExists",
          "params",
          "Assembly Version",
          "ClientPlugin.dll",
          "SendToServer",
          "RebuildHostCache",
          "m_Context",
          "KeyValuePair`2",
          "GetObjectValue",
          "set_Value",
          "TargetMethod",
          "My.Application",
          "1.2.0.0",
          "NanoCore.My",
          "IDATx",
          "Microsoft.VisualBasic.CompilerServices",
          "InternalName",
          "message",
          "System",
          "#Blob",
          "_CorDllMain",
          "System.Diagnostics",
          "MulticastDelegate",
          "ClientPlugin",
          "ComVisibleAttribute",
          "MyApplication",
          "IClientNameObjectCollection",
          "MyGroupCollectionAttribute",
          "EditorBrowsableAttribute",
          "pipeName",
          "AddHostEntry",
          "ParamArrayAttribute",
          "MyComputer",
          "BeginInvoke",
          ".ctor",
          "MyProject",
          "compress",
          "ThreadSafeObjectProvider`1",
          "LogClientException",
          "ConnectionStateChanged",
          "DebuggerHiddenAttribute",
          "System.ComponentModel",
          "ToString",
          "DelegateCallback",
          "instance",
          "wwwwwwwwwwwwww",
          "VarFileInfo",
          "LegalCopyright",
          "My.Computer",
          "get_Connected",
          "GetEntries",
          "AsyncCallback",
          "MyTemplate",
          "m_AppObjectProvider",
          "Restart",
          "System.Runtime.CompilerServices",
          "<Module>",
          "GetInstance",
          "Uninstall",
          "get_GetInstance",
          "Equals",
          "IAsyncResult",
          "wwwwww",
          "ClientSettingChanged",
          "EndInvoke",
          "My.User",
          "FileVersion",
          "ClientInvokeDelegate",
          "ContextValue`1",
          "SetValue",
          "IClientNetwork",
          "get_WebServices",
          "PipeCreated",
          "`.rsrc",
          ".text",
          "AssemblyFileVersionAttribute",
          "WebServices",
          "Invoke",
          "StringFileInfo",
          "LogClientMessage",
          "GuidAttribute",
          "NanoCore",
          "AssemblyTrademarkAttribute",
          "DelegateAsyncState",
          "v2.0.50727",
          "ProductVersion",
          "#Strings",
          "System.Collections.Generic",
          "System.ComponentModel.Design",
          "Microsoft.VisualBasic",
          "AssemblyProductAttribute",
          "ClientSettings",
          "FileDescription",
          "@.reloc",
          "ConnectionFailed",
          "IClientUIHost",
          "$d6e3c4d8-8560-4021-a765-fad7362f3388",
          "VariableChanged",
          "MyWebServices",
          "!This program cannot be run in DOS mode.",
          "ClosePipe",
          "My.WebServices",
          "Variables",
          "IClientLoggingHost",
          "GetHashCode",
          "IClientNetworkHost",
          "TargetObject",
          "AssemblyCompanyAttribute",
          "BuildingHostCache",
          "GetValue",
          "m_UserObjectProvider",
          "Connected",
          "IClientApp",
          "RuntimeCompatibilityAttribute",
          "Dispose__Instance__",
          "8.0.0.0",
          "CompilationRelaxationsAttribute",
          "get_Application",
          "IClientData",
          "Activator",
          "000004b0",
          "PipeExists",
          "state",
          "PluginUninstalling",
          "Application",
          "Translation",
          "mscorlib",
          "OriginalFilename",
          "RuntimeHelpers",
          "RemoveValue",
          "IClientReadOnlyNameObjectCollection",
          "get_User",
          "CreateInstance",
          "IClientAppHost",
          "HideModuleNameAttribute",
          "connected",
          "ReadPacket",
          "System.Runtime.InteropServices",
          "value",
          "VS_VERSION_INFO",
          "HelpKeywordAttribute",
          "get_Variables",
          "Create__Instance__",
          "Computer",
          "Disconnect",
          "Exception",
          "AssemblyTitleAttribute",
          "defaultValue",
          "ApplicationBase",
          "#GUID",
          "ClientUninstalling",
          "AssemblyDescriptionAttribute",
          "NanoCore.ClientPlugin",
          "IClientDataHost",
          "Object",
          "get_BuilderSettings",
          "method",
          "System.Reflection",
          "AssemblyCopyrightAttribute",
          "DisableProtection",
          "get_Value",
          "Microsoft.VisualBasic.Devices",
          "4System.Web.Services.Protocols.SoapHttpClientProtocol",
          "m_MyWebServicesObjectProvider",
          "m_ComputerObjectProvider",
          "BuilderSettings",
          "GeneratedCodeAttribute",
          "NanoCore.ClientPluginHost",
          "Shutdown",
          "DelegateAsyncResult",
          "RuntimeTypeHandle",
          "WrapNonExceptionThrows",
          "get_Computer",
          ".cctor",
          "GetType",
          "StandardModuleAttribute",
          "GetTypeFromHandle",
          "PipeClosed",
          "EditorBrowsableState",
          "Microsoft.VisualBasic.ApplicationServices",
          "Microsoft.VisualBasic.MyServices.Internal"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 8,
        "cape_type": "Unpacked PE Image: 32-bit DLL",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x07CC0000"
      },
      {
        "name": "f9b8c3f31375e9a1ec105f930f751869a804110d29d6b38e7298622eb74b2bec",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/f9b8c3f31375e9a1ec105f930f751869a804110d29d6b38e7298622eb74b2bec",
        "guest_paths": "8;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x080D0000;?",
        "size": 12288,
        "crc32": "8EB03B4F",
        "md5": "42006852619847f368bc4062849cd6dc",
        "sha1": "ba6edc3a5aba8eac15b6a30e1407cdae80b2481d",
        "sha256": "f9b8c3f31375e9a1ec105f930f751869a804110d29d6b38e7298622eb74b2bec",
        "sha512": "92f8f8d8809c37927e6c0f94d35450b16f71b4252d2e316558991105b1bd90b644bc9f8cbbca68423e1371215567b11c631eee5fcbf42dc08c2341cc91dd053e",
        "rh_hash": null,
        "ssdeep": "192:Wb5lecl5SzxgU1g16ldP8i9CL69w582bDAetqL0yQA+cj:Wb5QlnrdP8ICL6q5vb0et9yQXo",
        "type": "PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows",
        "yara": [
          {
            "name": "NETDLLMicrosoft",
            "meta": {
              "author": "malware-lu"
            },
            "strings": [
              "{ 00 00 00 00 00 00 00 00 5F 43 6F 72 44 6C 6C 4D 61 69 6E 00 6D 73 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 }"
            ],
            "addresses": {
              "a0": 10346
            }
          },
          {
            "name": "IsPE32",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsNET_DLL",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsDLL",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsConsole",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "Microsoft_Visual_Studio_NET",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 10382
            }
          },
          {
            "name": "Microsoft_Visual_C_v70_Basic_NET_additional",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 10382
            }
          },
          {
            "name": "Microsoft_Visual_C_Basic_NET",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "b": 10382
            }
          },
          {
            "name": "Microsoft_Visual_Studio_NET_additional",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 10382
            }
          },
          {
            "name": "Microsoft_Visual_C_v70_Basic_NET",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "b": 10382
            }
          },
          {
            "name": "NET_executable_",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "a": 10382
            }
          },
          {
            "name": "NET_executable",
            "meta": {},
            "strings": [
              "{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }"
            ],
            "addresses": {
              "b": 10382
            }
          }
        ],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T1B042D61EDF8CC667DB6993BCD4E24E0A1760A431BA73DB9FB80481640587BF8051B39B",
        "sha3_384": "201a8c71a37dc4dbd0df68b438794dab6fa7ae615b5a6a2e73ad4db8e2173640f1fd04e11272028001a4a010d64b85b6",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "pe": {
          "guest_signers": {
            "aux_sha1": null,
            "aux_timestamp": null,
            "aux_valid": false,
            "aux_error": true,
            "aux_error_desc": "No signature found.",
            "aux_signers": []
          },
          "digital_signers": [],
          "imagebase": "0x00400000",
          "entrypoint": "0x0000468e",
          "ep_bytes": "ff250020400000000000000000000000",
          "peid_signatures": null,
          "reported_checksum": "0x00000000",
          "actual_checksum": "0x0000580e",
          "osversion": "4.0",
          "machine_type": "IMAGE_FILE_MACHINE_I386",
          "pdbpath": null,
          "imports": {
            "mscoree": {
              "dll": "mscoree.dll",
              "imports": [
                {
                  "address": "0x402000",
                  "name": "_CorDllMain"
                }
              ]
            }
          },
          "exported_dll_name": null,
          "exports": [],
          "dirents": [
            {
              "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
              "virtual_address": "0x00004638",
              "size": "0x00000053"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
              "virtual_address": "0x00006000",
              "size": "0x00000298"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
              "virtual_address": "0x00008000",
              "size": "0x0000000c"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_TLS",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_IAT",
              "virtual_address": "0x00002000",
              "size": "0x00000008"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
              "virtual_address": "0x00002008",
              "size": "0x00000048"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            }
          ],
          "sections": [
            {
              "name": ".text",
              "raw_address": "0x00000200",
              "virtual_address": "0x00002000",
              "virtual_size": "0x00002694",
              "size_of_data": "0x00002800",
              "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x60000020",
              "entropy": "5.43"
            },
            {
              "name": ".rsrc",
              "raw_address": "0x00002a00",
              "virtual_address": "0x00006000",
              "virtual_size": "0x00000298",
              "size_of_data": "0x00000400",
              "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x40000040",
              "entropy": "2.14"
            },
            {
              "name": ".reloc",
              "raw_address": "0x00002e00",
              "virtual_address": "0x00008000",
              "virtual_size": "0x0000000c",
              "size_of_data": "0x00000200",
              "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x42000040",
              "entropy": "0.08"
            }
          ],
          "overlay": null,
          "resources": [
            {
              "name": "RT_VERSION",
              "offset": "0x00006058",
              "size": "0x0000023c",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "3.19"
            }
          ],
          "versioninfo": [
            {
              "name": "Translation",
              "value": "0x0000 0x04b0"
            },
            {
              "name": "FileDescription",
              "value": " "
            },
            {
              "name": "FileVersion",
              "value": "0.0.0.0"
            },
            {
              "name": "InternalName",
              "value": "Lzma#.dll"
            },
            {
              "name": "LegalCopyright",
              "value": " "
            },
            {
              "name": "OriginalFilename",
              "value": "Lzma#.dll"
            },
            {
              "name": "ProductVersion",
              "value": "0.0.0.0"
            },
            {
              "name": "Assembly Version",
              "value": "0.0.0.0"
            }
          ],
          "imphash": "dae02f32a21e03ce65412f6e56942daa",
          "timestamp": "2011-04-12 14:47:32",
          "icon": null,
          "icon_hash": null,
          "icon_fuzzy": null,
          "icon_dhash": null,
          "imported_dll_count": 1
        },
        "data": null,
        "strings": [
          "mscoree.dll",
          "0.0.0.0",
          "DecodeDirectBits",
          "ICodeProgress",
          "rangeDecoder",
          "kStartPosModelIndex",
          "kTopValue",
          "_streamPos",
          "Assembly Version",
          "numBitLevels",
          "WriteCoderProperties",
          "CoderPropID",
          "Range",
          "m_Decoders",
          "LenDecoder",
          "kNumFullDistances",
          "kNumPosStatesBitsEncodingMax",
          "GetLenToPosState",
          "m_Choice",
          "m_MidCoder",
          "numPosStates",
          "m_LowCoder",
          "InternalName",
          "progress",
          "distance",
          "prevByte",
          "Decode",
          "GetState",
          "kNumLitPosStatesBitsEncodingMax",
          "OutWindow",
          "#Blob",
          "System",
          "State",
          "LiteralDecoder",
          "kNumPosStatesEncodingMax",
          "dictionarySize",
          "m_IsRepG1Decoders",
          "_CorDllMain",
          "m_NumPosStates",
          "m_DictionarySize",
          "m_IsRepG2Decoders",
          "DecodeNormal",
          "LayoutKind",
          "SetProgress",
          "kNumStates",
          "Lzma#",
          "m_PosDecoders",
          "numPosBits",
          "m_NumPosBits",
          ".ctor",
          "ReleaseStream",
          "_buffer",
          "MatchFinder",
          "UpdateChar",
          "solid",
          "kNumLowLenBits",
          "ICoder",
          "UpdateRep",
          "_windowSize",
          "kNumPosSlotBits",
          "DictionarySize",
          "NumPasses",
          "m_LiteralDecoder",
          "VarFileInfo",
          "kNumLenSymbols",
          "kNumMidLenBits",
          "LegalCopyright",
          "UsedMemorySize",
          "kNumLowLenSymbols",
          "System.Runtime.CompilerServices",
          "m_RangeDecoder",
          "propIDs",
          "<Module>",
          "StructLayoutAttribute",
          "kNumMoveBits",
          "_cX*n",
          "outSize",
          "numTotalBits",
          "Algorithm",
          "inputBytes",
          "FileVersion",
          "stream",
          "Decoder2",
          "m_IsRepG0Decoders",
          "BitTreeDecoder",
          "System.IO",
          "SetLiteralProperties",
          "kDicLogSizeMin",
          "kNumLenToPosStates",
          "`.rsrc",
          "SetDictionarySize",
          ".text",
          "NumBitLevels",
          "UpdateMatch",
          "StringFileInfo",
          "m_NumPrevBits",
          "LitContextBits",
          "kNumRepDistances",
          "Write",
          "v2.0.50727",
          "ReverseDecode",
          "ProductVersion",
          "#Strings",
          "kNumAlignBits",
          "m_IsMatchDecoders",
          "get_Length",
          "Models",
          "FileDescription",
          "@.reloc",
          "inStream",
          "windowSize",
          "get_Position",
          "!This program cannot be run in DOS mode.",
          "kMatchMinLen",
          "kAlignTableSize",
          "m_OutWindow",
          "Compression.RangeCoder",
          "m_DictionarySizeCheck",
          "m_HighCoder",
          "MemoryStream",
          "m_IsRepDecoders",
          "kAlignMask",
          "value__",
          "m_PosStateMask",
          "m_PosMask",
          "m_RepLenDecoder",
          "_stream",
          "RuntimeCompatibilityAttribute",
          "Index",
          "numPrevBits",
          "kNumPosStatesBitsMax",
          "CompilationRelaxationsAttribute",
          "CopyBlock",
          "PutByte",
          "kMatchMaxLen",
          "000004b0",
          "m_PosSlotDecoder",
          "ToArray",
          "mscorlib",
          "Translation",
          "OriginalFilename",
          "IWriteCoderProperties",
          "BitDecoder",
          "properties",
          "kNumLenToPosStatesBits",
          "UpdateShortRep",
          "m_Coders",
          "kNumPosStatesMax",
          "LitPosBits",
          "MultiThread",
          "kNumBitModelTotalBits",
          "posState",
          "outStream",
          "System.Runtime.InteropServices",
          "kBitModelTotal",
          "Compression.LZMA",
          "IsCharState",
          "SetDecoderProperties",
          "ValueType",
          "SetCoderProperties",
          "Order",
          "Decoder",
          "VS_VERSION_INFO",
          "ISetDecoderProperties",
          "kEndPosModelIndex",
          "inSize",
          "Exception",
          "m_LenDecoder",
          "DecodeWithMatchByte",
          "m_Choice2",
          "EndMarker",
          "#GUID",
          "Stream",
          "startIndex",
          "Object",
          "kNumHighLenBits",
          "Flush",
          "matchByte",
          "Lzma#.dll",
          "NumFastBytes",
          "kNumMidLenSymbols",
          "Compression.LZ",
          "PosStateBits",
          "ISetCoderProperties",
          "kNumLitContextBitsMax",
          "SetPosBitsProperties",
          "m_PosAlignDecoder",
          "m_IsRep0LongDecoders",
          "Create",
          "SeekOrigin",
          "ReadByte",
          "WrapNonExceptionThrows",
          "kNumPosModels",
          "GetByte",
          "Decompress"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 8,
        "cape_type": "Unpacked PE Image: 32-bit DLL",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x080D0000"
      },
      {
        "name": "6b675aee5977bf2c1feca2cf8cbe8b973aa8ac7c03ca3ccb4b7bda31c8f7c4fc",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/6b675aee5977bf2c1feca2cf8cbe8b973aa8ac7c03ca3ccb4b7bda31c8f7c4fc",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x08340000;?",
        "size": 2141,
        "crc32": "AA252797",
        "md5": "8cda557aeb7fb52f9769d7c4c2499d5c",
        "sha1": "8b41cc0e22595630136f6d016704d3c8e3dbe8ea",
        "sha256": "6b675aee5977bf2c1feca2cf8cbe8b973aa8ac7c03ca3ccb4b7bda31c8f7c4fc",
        "sha512": "54e8d658ffb5174ebb27e398a494e1704dcc1a97b919249f82c2e9a609bada2ca3360bb2e843a8545f6a5ff69f7191526c8a96d94bdc1db7874d4a84158b99e7",
        "rh_hash": null,
        "ssdeep": "12:e7uO/+SgjG2qXae0bCS23Wa4TOLxiNYZaYb7gVOPlxE4OGloiP4nXLCM7qbqOj:k+SKqIbCbWanxJAYbc8dFZAT7qz",
        "type": "data",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T1B841A226D135E251C0416A3EBF378B214755DC165542DE6E430CF53DAED65F427922CC",
        "sha3_384": "c0695089766eca2030cceee8afce68d7cd8e3eacc880fe81f721bb9cbdfd9088da9e4ce8f62aec85995ea6ef72e3339f",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [
          "! #!%\"'#)$+%-&/'1(3)5*7+9,;-=.?/A0E1I2M3Q4U5Y6]7a8e9i:m;q<u=y>}?"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x08340000"
      },
      {
        "name": "c6f4ddc492dbb4b5ee073e68b4cbb26e22867c064e45555f3f866adf987475d7",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/c6f4ddc492dbb4b5ee073e68b4cbb26e22867c064e45555f3f866adf987475d7",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x08360000;?",
        "size": 14033,
        "crc32": "0E15813C",
        "md5": "048fc47bf6a7455f4c2f5572385f7165",
        "sha1": "bd66127405451bf47db1eb11ba7d5ea4b3b9d97f",
        "sha256": "c6f4ddc492dbb4b5ee073e68b4cbb26e22867c064e45555f3f866adf987475d7",
        "sha512": "8276e51cc544f11e14c1a72f8a7899fd1f4aaa0e4a8adada6e42a66873aa77191ff700b19bd2dbc701eae3c076a089d555cd970828797b9c78985480c14e46f4",
        "rh_hash": null,
        "ssdeep": "384:Aa+OguAhdkDHAtx92aG8buzs6eql83tkCk:Aa+RuAhdWADoaG8bqs6eLk",
        "type": "Matlab v4 mat-file (little endian) xO\\311, numeric, rows 137756672, columns 65536, imaginary (1)",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T1C9520901CF859167DD17A6B0123993E6E251DFF0777A0A8627D49F3DAA301D2CA69F03",
        "sha3_384": "4b8c5217cbd9e48aa33d64ae8cd9ba99897739dd4fe9aad4a1bca94fd5d274e01626f7f855aa8c52c1e55d54dd8b9775",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [
          "diCk;",
          "w :G ",
          "=Tk^]",
          "<Tk^]",
          "Bk^_]",
          "BkY^_",
          ":Tk^]",
          ";#okX"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x08360000"
      },
      {
        "name": "064ec728231780bebf305dc752c6dbeca6cb311f53dec5a57657cd7d5a42f2a9",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/064ec728231780bebf305dc752c6dbeca6cb311f53dec5a57657cd7d5a42f2a9",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x7F350000;?",
        "size": 44,
        "crc32": "DF43BF57",
        "md5": "323fa4ac3cfca4d00ad5d478a70b0b22",
        "sha1": "600b38be261cc37e2344ce5bc57cd6ad69ed832e",
        "sha256": "064ec728231780bebf305dc752c6dbeca6cb311f53dec5a57657cd7d5a42f2a9",
        "sha512": "a6d9742460b7a6fc3ecb27812092ae9ec34163e26ca85d4b538a39b4b2ccdbdb49c72128110ad2a3bb2978844ec655dba2cca4e6445dbd798ff572545663077d",
        "rh_hash": null,
        "ssdeep": "3:Uaql/stl+ClrxlvLlXf:UF/sX+mXv5",
        "type": "data",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": null,
        "sha3_384": "2f0992b7985ab64371a06839435ae2b63c8fc37f942a8547ed9636ee8919ef42cbae60d64ce51659a671f2c0df229989",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x7F350000"
      },
      {
        "name": "833716013580540b419235427cbc5a709845b35d92acea3efe9d77e038f00cf4",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/833716013580540b419235427cbc5a709845b35d92acea3efe9d77e038f00cf4",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x07A40000;?",
        "size": 32766,
        "crc32": "FBC69DFA",
        "md5": "96d5a0deafbd8c893eb63e8fded72b6c",
        "sha1": "a44ce1dba38551e363144cd1b18f16debdfb4c94",
        "sha256": "833716013580540b419235427cbc5a709845b35d92acea3efe9d77e038f00cf4",
        "sha512": "368b62d428f285385485298746055c6c1ec5a35c079bdb7d50950af961e83b9069a0817519a900e35e0af1119e3a7a3ebc4fb627be4c0867c84c33b91703ab2d",
        "rh_hash": null,
        "ssdeep": "96:ctUM/eMCi8JeKDZItKU5L0TNjAhtcLcxn71n1+qv2zKm3Mmc:D7gKDZA0dSgcx7p1hv2zK4c",
        "type": "data",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T154E27746BBA2C913C6111B3C5CD6C3543734FD889B0B5B0F31A5B32F2DB57A66E1A198",
        "sha3_384": "dc2057fed0fb8c85ca33d2435975983fed82ed6e04b681cfbe057658b0a97f606698f7dca600479570bb7e0d329cb611",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x07A40000"
      },
      {
        "name": "ad377bc1882345987f8d7f32117df03e8918144a6039f0a89ded1742ba15df70",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/ad377bc1882345987f8d7f32117df03e8918144a6039f0a89ded1742ba15df70",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x05070000;?",
        "size": 1380,
        "crc32": "23FA1C1B",
        "md5": "be087b7e9fd145f7b981293d21430c98",
        "sha1": "50d22fe1a2ee76d9c687e565b08664109b9b11fc",
        "sha256": "ad377bc1882345987f8d7f32117df03e8918144a6039f0a89ded1742ba15df70",
        "sha512": "6ea9e3d167279d8e507c32ce38ce684e00f9ade16a53480a9b54984aef9060ab5779c13f52da5ef86b0e291594f5a864e84eb0c944cf77a1ddf0ec57faaa8a5f",
        "rh_hash": null,
        "ssdeep": "24:7Q7NJ+SocigQB4SFq+GZG/1og3e5tJUUcLyhmOaxlgDjw30CWT:kZJvbQBzPV/1f3RukrXgDjw0CU",
        "type": "Windows boot log, header size 0x5070000, 0x1 valid bytes",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T1AB2120428AE765F1C00EC9F4483C6317C48394C765B6CB456A6EEC3A00F23218B265B3",
        "sha3_384": "4bb42e3137f01b1fcce76d412fe5a7c696b6dc9f90b6f5b5e23f1722599e4754abe4a15766946b2b704c9d9c36beed03",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [
          "Y[^_]"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x05070000"
      },
      {
        "name": "01e3b18bd63981decb384f558f0321346c3334bb6e6f97c31c6c95c4ab2fe354",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/01e3b18bd63981decb384f558f0321346c3334bb6e6f97c31c6c95c4ab2fe354",
        "guest_paths": "8;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x07F60000;?",
        "size": 100352,
        "crc32": "EDEEDF40",
        "md5": "9c8242440c47a4f1ce2e47df3c3ddd28",
        "sha1": "874f3caf663265f7dd18fb565d91b7d915031251",
        "sha256": "01e3b18bd63981decb384f558f0321346c3334bb6e6f97c31c6c95c4ab2fe354",
        "sha512": "3525b219fec9894d9d534e6774e19fbf7097c9a00d733c11bee14c90b9beb82ce4cd2a35e97be71f096a7f6d60051da4026ab8e42c0409b0e54b50cd482beb7d",
        "rh_hash": null,
        "ssdeep": "3072:2m7DYfm4SRR+NaVEs+k6kiS+94ERR6gR0bRbD:2IoIRRGaVExfd",
        "type": "PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows",
        "yara": [
          {
            "name": "DITEKSHEN_MALWARE_Win_Nanocore",
            "meta": {
              "description": "Detects NanoCore",
              "author": "ditekSHen",
              "id": "931b98f6-df2b-538b-bc49-ecbbd24334da",
              "date": "2020-11-06",
              "modified": "2024-11-01",
              "reference": "https://github.com/ditekshen/detection",
              "source_url": "https://github.com/ditekshen/detection/blob/e76c93dcdedff04076380ffc60ea54e45b313635/yara/malware.yar#L7654-L7681",
              "license_url": "https://github.com/ditekshen/detection/blob/e76c93dcdedff04076380ffc60ea54e45b313635/LICENSE.txt",
              "logic_hash": "6336260e0af2b4b51338ee066f41b7c58aa134a6c03ca110db7e088edf2b65a7",
              "score": 75,
              "quality": 75,
              "tags": "FILE"
            },
            "strings": [
              "NanoCore.ClientPlugin",
              "NanoCore.ClientPluginHost",
              "IClientData",
              "IClientNetwork",
              "IClientDataHost",
              "IClientLoggingHost",
              "IClientNetworkHost",
              "IClientUIHost",
              "IClientNameObjectCollection",
              "IClientReadOnlyNameObjectCollection",
              "ClientPlugin",
              "get_ClientSettings"
            ],
            "addresses": {
              "x2": 63352,
              "x3": 63405,
              "i2": 63340,
              "i3": 63374,
              "i5": 63389,
              "i6": 63431,
              "i7": 63450,
              "i8": 63469,
              "i9": 63483,
              "i10": 63511,
              "s1": 63361,
              "s6": 83874
            }
          },
          {
            "name": "Windows_Trojan_Nanocore_d8c4e3c5",
            "meta": {
              "author": "Elastic Security",
              "id": "d8c4e3c5-8bcc-43d2-9104-fa3774282da5",
              "fingerprint": "e5c284f14c1c650ef8ddd7caf314f5318e46a811addc2af5e70890390c7307d4",
              "creation_date": "2021-06-13",
              "last_modified": "2021-08-23",
              "threat_name": "Windows.Trojan.Nanocore",
              "reference_sample": "b2262126a955e306dc68487333394dc08c4fbd708a19afeb531f58916ddb1cfd",
              "severity": 100,
              "arch_context": "x86, arm64",
              "scan_context": "file, memory",
              "license": "Elastic License v2",
              "os": "windows"
            },
            "strings": [
              "NanoCore.ClientPluginHost",
              "NanoCore.ClientPlugin",
              "get_BuilderSettings",
              "LogClientException",
              "IClientLoggingHost"
            ],
            "addresses": {
              "a1": 63405,
              "a2": 63352,
              "b1": 83699,
              "b7": 83554,
              "b9": 63431
            }
          },
          {
            "name": "Nanocore_RAT_Gen_2",
            "meta": {
              "description": "Detetcs the Nanocore RAT",
              "author": "Florian Roth",
              "score": 100,
              "reference": "https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/",
              "date": "2016-04-22",
              "hash1": "755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050"
            },
            "strings": [
              "NanoCore.ClientPluginHost",
              "IClientNetworkHost"
            ],
            "addresses": {
              "x1": 63405,
              "x2": 63450
            }
          },
          {
            "name": "NETDLLMicrosoft",
            "meta": {
              "author": "malware-lu"
            },
            "strings": [
              "{ 00 00 00 00 00 00 00 00 5F 43 6F 72 44 6C 6C 4D 61 69 6E 00 6D 73 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 }"
            ],
            "addresses": {
              "a0": 87502
            }
          },
          {
            "name": "IsPE32",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsNET_DLL",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsDLL",
            "meta": {},
            "strings": [],
            "addresses": {}
          },
          {
            "name": "IsConsole",
            "meta": {},
            "strings": [],
            "addresses": {}
          }
        ],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T134A3490766CD6EAEDABD4638733307C6C328CE425953D6DE28D420659A3A7D33A033D6",
        "sha3_384": "a9b9993935da4f81da652c08d13476b1a9b1baf3bedb362f5ac175fc33b5fc213b0b5decb98df5aca700b0c7e41e316e",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "pe": {
          "guest_signers": {
            "aux_sha1": null,
            "aux_timestamp": null,
            "aux_valid": false,
            "aux_error": true,
            "aux_error_desc": "No signature found.",
            "aux_signers": []
          },
          "digital_signers": [],
          "imagebase": "0x00400000",
          "entrypoint": "0x000173f2",
          "ep_bytes": "ff25002040000000000000000000",
          "peid_signatures": null,
          "reported_checksum": "0x00000000",
          "actual_checksum": "0x00025abf",
          "osversion": "4.0",
          "machine_type": "IMAGE_FILE_MACHINE_I386",
          "pdbpath": null,
          "imports": {
            "mscoree": {
              "dll": "mscoree.dll",
              "imports": [
                {
                  "address": "0x402000",
                  "name": "_CorDllMain"
                }
              ]
            }
          },
          "exported_dll_name": null,
          "exports": [],
          "dirents": [
            {
              "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
              "virtual_address": "0x00017398",
              "size": "0x00000057"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
              "virtual_address": "0x0001a000",
              "size": "0x00002f88"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
              "virtual_address": "0x00018000",
              "size": "0x0000000c"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_TLS",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_IAT",
              "virtual_address": "0x00002000",
              "size": "0x00000008"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
              "virtual_address": "0x00002008",
              "size": "0x00000048"
            },
            {
              "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
              "virtual_address": "0x00000000",
              "size": "0x00000000"
            }
          ],
          "sections": [
            {
              "name": ".text",
              "raw_address": "0x00000200",
              "virtual_address": "0x00002000",
              "virtual_size": "0x000153f8",
              "size_of_data": "0x00015400",
              "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x60000020",
              "entropy": "6.94"
            },
            {
              "name": ".reloc",
              "raw_address": "0x00015600",
              "virtual_address": "0x00018000",
              "virtual_size": "0x0000000c",
              "size_of_data": "0x00000200",
              "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x42000040",
              "entropy": "0.10"
            },
            {
              "name": ".rsrc",
              "raw_address": "0x00015800",
              "virtual_address": "0x0001a000",
              "virtual_size": "0x00002f88",
              "size_of_data": "0x00003000",
              "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
              "characteristics_raw": "0x40000040",
              "entropy": "3.34"
            }
          ],
          "overlay": null,
          "resources": [
            {
              "name": "RT_ICON",
              "offset": "0x0001a208",
              "size": "0x000002e8",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "1.71"
            },
            {
              "name": "RT_ICON",
              "offset": "0x0001a4f0",
              "size": "0x00000128",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.08"
            },
            {
              "name": "RT_ICON",
              "offset": "0x0001a618",
              "size": "0x000008a8",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "1.72"
            },
            {
              "name": "RT_ICON",
              "offset": "0x0001aec0",
              "size": "0x00000568",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "1.05"
            },
            {
              "name": "RT_ICON",
              "offset": "0x0001b428",
              "size": "0x00000353",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "4.05"
            },
            {
              "name": "RT_ICON",
              "offset": "0x0001b77c",
              "size": "0x000010a8",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.72"
            },
            {
              "name": "RT_ICON",
              "offset": "0x0001c824",
              "size": "0x00000468",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.76"
            },
            {
              "name": "RT_GROUP_ICON",
              "offset": "0x0001cc8c",
              "size": "0x00000068",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "2.69"
            },
            {
              "name": "RT_VERSION",
              "offset": "0x0001ccf4",
              "size": "0x00000294",
              "filetype": null,
              "language": "LANG_NEUTRAL",
              "sublanguage": "SUBLANG_NEUTRAL",
              "entropy": "3.30"
            }
          ],
          "versioninfo": [
            {
              "name": "Translation",
              "value": "0x0000 0x04b0"
            },
            {
              "name": "FileDescription",
              "value": " "
            },
            {
              "name": "FileVersion",
              "value": "1.0.1.7"
            },
            {
              "name": "InternalName",
              "value": "SurveillanceExClientPlugin.dll"
            },
            {
              "name": "LegalCopyright",
              "value": " "
            },
            {
              "name": "OriginalFilename",
              "value": "SurveillanceExClientPlugin.dll"
            },
            {
              "name": "ProductVersion",
              "value": "1.0.1.7"
            },
            {
              "name": "Assembly Version",
              "value": "1.0.1.7"
            }
          ],
          "imphash": "dae02f32a21e03ce65412f6e56942daa",
          "timestamp": "2015-02-22 00:49:49",
          "icon": "iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAY0lEQVR4nO3XIQ6AMBBE0YH0eGuAcwKmZ1sLCkHRZUj4o9qaeVmzqfT3DJl5OAGjs1ySynWIiFeLa62SPjABAABK+7Cte9fCeZlud/sEAAAAAAAAADvgsY7bddk79gnwMSH2nLDUDvNx5OJLAAAAAElFTkSuQmCC",
          "icon_hash": "f66c7c86e9ab59ef3f289acd613a3738",
          "icon_fuzzy": "c3ca946d749a15ad18efd3e5d7b0d8f5",
          "icon_dhash": "454545d4d4d44503",
          "imported_dll_count": 1
        },
        "data": null,
        "strings": [
          "#=qJMk2mm7JzMNLHm_qiokaBg==",
          "#=qdKcJdwMiOeYxOOef7tprPA==",
          "FileSystemInfo",
          "SurveillanceExClientPlugin.dll",
          "#=qj9ZxzplN98x0cw4vsdTIeAYbm4MuQTx3vvInSGv6TNQ=",
          "#=qmYO5ZdL8rYBU50vW2vu2vA==",
          "#=qNvC_NYQ$jxwZUcf0Dch28Q==",
          "#=q3$2Q8bGYuhwIzDGhDbeVKw==",
          "Concat",
          "MatchCollection",
          "Device",
          "wgdYBzhSP",
          "mscoree.dll",
          "get_Unicode",
          "DecodeDirectBits",
          "Environment",
          "0.0.0.0",
          "#=qSEueyU62hrm3SqHJ6k683A==",
          "#=q_DoWG6qBrmNj2sFXhHToddcMKO0wW3x6VUG0Xl$sx6Q=",
          "_Lambda$__2",
          "#=qCY4x0Hk1DV3VV540zoAoHq44QCRyxMpq9Z7J0uRDONc=",
          "AssemblyName",
          "Handle",
          "$+8)l",
          "WriteCoderProperties",
          "System.Collections",
          "DnsRecord",
          "#=qoESbzrXX757aiWupYaS0Fg==",
          "GetWindowThreadProcessId",
          "System.Resources",
          "\\3P0_",
          "GetProcessById",
          "set_Value",
          "#=qLoRN6X6HIt1Xa9meALla1w==",
          "#=qRLsSPguDZ2WiS_9q1jK0OA==",
          "feffeeffeefa",
          "kNumPosStatesBitsEncodingMax",
          "buffer",
          "9feffefeefef",
          "#=qXbC0g0j7eSDHrYXbfI7uUQ==",
          "numPosStates",
          "fefeffefefeYa*&+",
          "#=q1SKypGFVOvRWVSxnayoaZA==",
          "ffefeeffeefa",
          "#=qWJ6BottP3sy8x7gEdcb0bA==",
          "DNSLogging",
          "`Q[;*",
          "Int32",
          "#=qX9Iav0g17FfZrf$Wa_Z$UA==",
          "MethodBase",
          "?lg(*%",
          "#=q1gvzY2QJaRNC2Opj5zvkew==",
          "#=qQtYdx8zGiMcgHSZRdJY2eNz7X7jeIu77OE$6MbjGdow=",
          "Operators",
          "#=qkWsKP7N1mMxiLhNKbBGyYQ==",
          "OutWindow",
          "#Blob",
          "kNumPosStatesEncodingMax",
          "_CorDllMain",
          "#=qjuMRqjMOfCBSkBZ$qdWB7gfgShTNiHkLFmJMr9kwm2s=",
          "dictionarySize",
          "System.Text.RegularExpressions",
          "m_IsRepG1Decoders",
          "AddRange",
          "m_NumPosStates",
          "#=qitflJGbE1LvsFZhH2KI8iw==",
          "m_IsRepG2Decoders",
          "w,>XG",
          "FxtdFQ",
          "#=qLkA5Ktc2Vyv3E0oIB4RaGKVcXXSrFPOpFhegspshwsM=",
          "#=q3On07nwtezKDVaTvvy7hQw==",
          "System.Text",
          "DefaultMemberAttribute",
          "#=q_lmCRPO7dEMifptlI90PUI6fTs37DVMnLP3Tc_99pO9b_Ar2C6S3QjxXlqu$2$Ji",
          "Lzma#",
          "#=qMf1osOFZtYMmK9zzNx40rfvv_YoLwDp8OMEKs9fpung=",
          "*g<G#",
          "#=qyu3NT2dToM$yBnnmjJpX_A==",
          "GetFileName",
          "r1@bR",
          "m_NumPosBits",
          "BeginInvoke",
          "#=q$JRP3cfSdESKqcBwdqroDA==",
          "*feffeefefa(k",
          "}f?}(",
          "#=qnK4q617M6jpGr1Yao9yYqS$4rymgiQhJ4ZFnefse3xw=",
          "#=qeoqI9zQPLOZjV1JthHFzOD41rl7NT5wwztozAPfluxU=",
          "#=q87OQiW26GT5YhhifxB1ycQ==",
          "#=qbq1zwN5cBc2zVzfqhNqQ3A==",
          "#=qZEddNhTPipNw6nrWW_Y$yg==",
          "#=qC8mTOCLir0glpBrmJ0SdnmHHFbkpzCiiLHzNBfM8wGI=",
          "#=q$lfwQP3V$fI_eAT4UNT4Xw==",
          "_windowSize",
          "#=qVfaUfLDWAzF$RlYVgj1wNF8n8kmTu$wot2J$tCjGN8Y=",
          "pL;tw3^",
          "kNumPosSlotBits",
          "#=qwEixqO2naf_HFyLxM_Gcyg==",
          "DictionarySize",
          "#=q6OFP010g5soKgnTnbmu3Kw==",
          "#=qnKUfPP6szza9tbB6nUy8xg==",
          "m_LiteralDecoder",
          "#=qbSzob7di0xhquDotppyDIQ==",
          "#=qQYHJ9cbQC48EyKpwpB16nA==",
          "VarFileInfo",
          "#=q44Ge7WkJpSnGLK6MLWcFSRNgYnrWBmFZXNBBEoIIDaA=",
          "#=q4JZtAkw1AbHjZDLXOWX1S7hObryEvjHFr2lpmZRKKqk=",
          "UsedMemorySize",
          "ExportLogs",
          "CreateParams",
          "kNumLowLenSymbols",
          "System.Runtime.CompilerServices",
          "m_RangeDecoder",
          "propIDs",
          "#=qFmRvgsWHCKQ4mLv0tVX1LpXWrQGWBW2uPMRDDZBQ3NE=",
          "#=qEpLGwcDnU1CmOXL0_Q9_G3ma45ep4FwMouAEwhe3UDs=",
          "#=qfr01crnlLbYOSEVqdzZl_w==",
          "#=qtHnEPLPkk7hMadnASVBYOQ==",
          "#=q8m3eeZ3I1fe5NWroFByPwA==",
          "GetMethod",
          "#=qK2wA50V2hd26U81M2F89yA==",
          "#=q_jsSB3r53EMKsX0IF7998lJdtArDwZA$R1FORxem2gw=",
          "#=qIgstGGQ5QFyArsA4tFZ9gMXl2Z1n7FQM8Ir5yEhe7bg=",
          "3N,6T*",
          "IAsyncResult",
          "wwwwww",
          "EndInvoke",
          "Algorithm",
          "#=qn5IIXKsG$Rjf5NLYW0itfKOM31oZHLt3gLqf2_kftP8=",
          "Exists",
          "Clipboard",
          "stream",
          "#=qswcK7hT_kB0QKWfJkx5yaA==",
          "command",
          "#=qdp3_X66oJZlpIuv5LiL7oQ==",
          "#=qdGm5exfEhNFieJscVwP7Ig==",
          "User32.dll",
          "kNumLenToPosStates",
          "SetDictionarySize",
          ".text",
          "NumBitLevels",
          "tWG:ga6z",
          "Capture",
          "_.S1y#",
          "GuidAttribute",
          "#=qnYAWlQj57yOiw8G56cyZ1xAHaR1U7XOmUh4Dl1Ry2dw=",
          "NanoCore",
          "FileStream",
          "MemberInfo",
          "AssemblyTrademarkAttribute",
          "kNumRepDistances",
          "#=qpnx7zwfabY$GPmx17OGM$Q==",
          "$b@k,",
          "Match",
          "#=qm3$lqQFHE5yybYEUJcsoLQ==",
          "DateTime",
          "IDisposable",
          "LoggingCommand",
          "#=qZa8aL9QQpAct_eZ$OvV3DGt0jcd0qAWUB$fEqNjyKFc=",
          "#=qI9SaxQ9YixVXqEOEyYy4jg==",
          "GetRuntimeDirectory",
          "#=qGISQnMqbcWeKV0TurcNIKw==",
          "ProductVersion",
          "#=qzJW9ga54odAXLIjfGeC53w==",
          "#=qoYvuV7eCvAwMxHUFDJS8wA==",
          "Models",
          "FileDescription",
          "@.reloc",
          "ffeefefeffea",
          "#=qYqZmZ8i0gJ622Li_3yoHLg==",
          "DebuggerDisplayAttribute",
          "w,khq",
          "w,&0,){",
          "KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator",
          "get_Position",
          "#=qMHZxfZF2XEPb0lw4JSM_Rw==",
          "IClientLoggingHost",
          "#=qqMa2dn7Mo8AUqcdTNVrKnysHWb5y124IcjK25vm9eZo=",
          "#=qt$d$Ds4e4Jw1OgazOrFmP7IjRAhcajYSRQ3nV1Gv_gE=",
          "Wow64GetThreadContext",
          "kMatchMinLen",
          "#=qGcjgY6CoWEyIyBHhl8IOzBWznvmxUV$ea7X6DYChG4I=",
          "#=qTL5DPmA8W6iSCBjEJji2rQ==",
          "#=q$rj0ypz44wmTUIatF3mcCg==",
          "#=qsgunsIbevOIs8JXy3CoZMA==",
          "GetObject",
          "#=qs2bxKs15DbteFYTMsjthM8IIAMC9Avo9uFWUE1JbxpU=",
          "#=qTYMI4cCoxNXwMnM7O2jYeq5drMeUlMrrV09hYVC9erY=",
          "GetDirectories",
          "kAlignMask",
          "*Q:Z<B",
          "GetDirectoryName",
          "#=qE6F54GYIBpn$BZEfY630Wg==",
          "Thread",
          "CreateDirectory",
          "ffeeffefefea",
          "#=qIi_Ou2QI9eJprahHe$q2OQ==",
          "Index",
          "#=q3Z5wFl9_0OdP0OU1ZerzvQ==",
          "#=qZiNMDewvnldx4qzy3_KAqsLzOSv7XeVY6NGBzI7UWoI=",
          "#=qUEJZL$C$BINDXimDMMdI001yzN7JKwKsT6fA3y_33Zs=",
          "#=qX0mlJ6fIIwM2M3pw4kuJng==",
          "#=qVtDJRWPjI1BzmKOCciT_67L$pos6o3jsSqZbgwOmTXo=",
          "CopyBlock",
          "PutByte",
          "\"HL%=1",
          "kMatchMaxLen",
          "IClientData",
          "Directory",
          "#=q_epRHVto2biCMMVbfiHzdQ==",
          "#=qRJ08F9z0iJoY3iiXB0Qlrw==",
          "000004b0",
          "ReadLine",
          "#=qmoIs$6x0ZDyGXIN93fBP0w==",
          "#=qL7K9B3ZmF8NvfG9na7qxaiahB_Fp2Mn46HhJZMIv3sM=",
          "m_PosSlotDecoder",
          "Translation",
          "mscorlib",
          "#=q9T22Isi75tDHRtquK1dSvA==",
          "RuntimeHelpers",
          "IWriteCoderProperties",
          "#=qmUIbDGkqnZakNX$ZVNONlw==",
          "#=qtkP1JPc7yNllp83Le5QCNA==",
          "#=qtD63hWVl90223y03RXLNrA==",
          "-%&~P",
          "#=qzR6FgwKHQePmETWSV3UHVg==",
          "IClientReadOnlyNameObjectCollection",
          "#=q2YB5GAXeEvmYmIsxoHVu4uVCCNRqFNZApRAwgfaevQg=",
          "kNumPosStatesMax",
          "UM>!NC'O",
          "#=qwyZBd1E$zygsKRdrCM1tlg==",
          "#=qadlAy0ld3tNeu$IcI$2Jq_Arv7ASxtaLzDJHV4HhJlY=",
          "HideModuleNameAttribute",
          "_Lambda$__7",
          "Default",
          "#=qWmdtsGcuMivbk1JtTASVvg==",
          "recordList",
          "o M(d",
          "outStream",
          "#=qSseLs6pMe5FoflVo2bRqOQ==",
          "Wow64SetThreadContext",
          "rawInputDevices",
          "ToLower",
          "IsCharState",
          "SetDecoderProperties",
          "Boolean",
          "8.0.0.0",
          "q<+-T5",
          "#=qur7j1M5vHkSPasucOkbcNw==",
          "J{4!jpH",
          "Order",
          "SendMessage",
          "#=qBcPm_drbp7ocdEoXBCg55Q==",
          "pAB|\"",
          "Matches",
          "#=qbVZ2VGZYhcslyt7WOHvByg==",
          "#=qZrBp2zQvnJP1R2KqzmmR8A==",
          "#=qt5WsljHA_z4lWKJJiNRSEGCnAbuC8NDsfhiN_p8Vhq4=",
          "System.Security",
          "Resources.resources",
          "Exception",
          "td8V/",
          "Sleep",
          "#=q$eByR1alsjlxVI5xhSAtpg==",
          "#=qUvNuZD70A1m1h5rP8mt7hxHu6e1_lErn05OLHflfW_U=",
          "#=qMxv2Vlcc2Tp8j_uByDYyGJMxccShzf3B6SeYq7g7Daw=",
          "TimeSpan",
          "DecodeWithMatchByte",
          "Tc#Cf",
          "#=q0$8sFvWAj3Q5z0kt5$qL1A==",
          "GetString",
          "#=q2gdZtLtmxCrF2SEuXdll9g==",
          "#GUID",
          "#=qy7SdMitZjkIreiUV191vv9ssNSzMPuW8jMow5TTkIUU=",
          "AssemblyDescriptionAttribute",
          "afeffeeffefe",
          "#=qG_YyprUv4EKXjeIN$dVZHA==",
          "#=qlAdkkonfdPbm4KDS2op$vaZdX8byjv$LxAv$dtNhCYM=",
          "#=qiuuc1hm1qoPzINMXy6yo6g==",
          "_Lambda$__10",
          "Flush",
          "get_UserName",
          "#=qf$JSULqR8FwRBjD8O35M78CMWrW22oajqxT6WI8BsvY=",
          "#=qpQA5HetEkOqW8wCwEjKRvA==",
          "GetBytes",
          "& v<y",
          "Microsoft.VisualBasic.Devices",
          "#=qM20PlP1dETH_UsxzbJfTKA==",
          "kNumMidLenSymbols",
          "RawInputKeyboard",
          "#=qW2f_iwWmYEr7F$sLsSJyUQOLwNV7jFL4HCiEoxW8lh4=",
          "#=qJaPb45IJRsbtEzYPWDbNwpthPAgk3ktYb4cxU6CRRns=",
          "#=qaouzCOurd1KB0CsJ9gMIzQ==",
          "#=qNX0lYEuSQ$nDBW9nSNQAZQ==",
          "lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet",
          "BitConverter",
          "set_Position",
          "ReadByte",
          "ChangeClipboardChain",
          ">5n4T",
          "#=qjPdKXesXFUYK$lTAuWfj4g==",
          "#=qZ8jdBbqDQs5U27LEbuhkeA==",
          "#=q2oxbm0Yzi5XQVj1QkCC71A==",
          "VUyP`\"",
          "StandardModuleAttribute",
          "#=qwJ4w0jkRVthW3ex8w5dly$cWay1Am4JSh9ZTwaXqcz4=",
          "kNumPosModels",
          "#=qFIAR8B1f$tNJs2xhTgINCnRaZkcxVSBxxXtjUtb7Whs=",
          "#=qMwDyeKYTOkSPK81Bwd7OY2mUhsDwOc5zugQnqg1ZfW0=",
          "#=qc3C7cwFHdA0fP9ewBftW90qaZ7YCZNSkeDx2JbA$rIM=",
          "GetLogs",
          "GetTypeFromHandle",
          "Split",
          "@3n'pA",
          "!FI};",
          "#=qr03MMh5pLoqsU2EEvN6ch6Tr7EGrL5c9eR_71qVrp$c=",
          ",{Uu\"p",
          "#=qxns0sTKVsgArVmXl3cFChFnM3Jv6Np_VftoasierUvg=",
          "get_Current",
          "#=qApHfpHzdRAuqPbkbKAzJmptqQgc7NLQ6T4N$H6aQHdw=",
          "4System.Web.Services.Protocols.SoapHttpClientProtocol",
          "FileMode",
          "#=qzx697Szk1moqO$yUynaioQ==",
          "#=qryghDdZnHsy$RagUj_T5aw==",
          "#=q3$4$aeeKw0G6KJpmbsHtCSC3$LdCNMfTzWNTjLVfIoU=",
          "System.Configuration",
          "$a58de1a4-5da5-48e4-8e57-197cc7b39b9b",
          "#=qT03bmh7uoc7QIggZX8722i59yRaiKXEb45q$FKk2uZY=",
          "GetForegroundWindow",
          "#=qfvCuRNoH9u00SSFFCvqZfg==",
          "Enumerator",
          "_Lambda$__1",
          "rangeDecoder",
          "#=qIxjnZll5GhllBN9b$ufZ3w==",
          "PasswordCommand",
          "Process",
          "#=qBvMiXP1hJ6VKxap1MxE0TUe8TQ47t0bgRFkWT_2Ymyk=",
          "#=q5sfq13B7vXg052uxfqu39g==",
          "CoderPropID",
          "]DB?w",
          "m_Decoders",
          "handle",
          "#=qBFvoYJt20gtsoLlWjU7jDuRfeDDIa87upzYCldwrNpI=",
          "headerSize",
          "GetLenToPosState",
          "lR7YPL",
          "#=qsV5K_71ZHH78FtoiXhsOYTV_Csv1aAdiiSCpj2X2l6o=",
          "#=qgHfmPA2gNKnydwzqeSF_2nVCUjp4Sfb3eJfQd$j975A=",
          "GetKeyboardLayout",
          "progress",
          "Microsoft.VisualBasic.CompilerServices",
          "prevByte",
          "ResolveEventHandler",
          "KeyboardCommand",
          "#=qt4h6_$cdnIG2g3BjEtlC9w==",
          "#=qZL$T$hC424exz5$sUQkm7w==",
          "#=qgC0tfaC3XL8FoOE$$1EOPjdVRTBNXr2NN6qMTkS_iSk=",
          "op_Equality",
          "PtrToStructure",
          "#=qmj_W3318X7UXjXz1JgFDnA==",
          "dnsapi.dll",
          "System",
          "CultureInfo",
          "#=qK8YSOZHQFwZhkU76$yIGwZGiGsr64hyFLs_9C0C9am4=",
          "#=qAQlIVHekXJrJwpDPrher5Q==",
          "_[&_C",
          "RawInputDevice",
          "#=qVa4dlGgXioIeYYgbx3$NvQ==",
          "~kItE",
          "m_DictionarySize",
          "DecodeNormal",
          "pvKSg&",
          "#=qPQ2EtheKurZp3OCkjzyyfQ==",
          "#=qCOMF0I9Fd3HxgGmFBDkurw==",
          "nextHandle",
          "#=qXtiqGLzJVH3aswCtlNNiug==",
          "MyGroupCollectionAttribute",
          "#=qrfNBcNMYeC4rLqwqMcn1jQ==",
          "CreateProcess",
          "#=qqLHT7hLUa1CKAG8LwjstJ5pArtyKEnkhPdyr1iCpbvQ=",
          "#=qU1ta1c$LOdIR6a7j6Rj67A==",
          "Group",
          "#=qKm6o1ledVqdR1Rw65bjQpA==",
          "MatchFinder",
          "ToByte",
          "#=qmHLlS2qqUAdmPyMYO7MoCg==",
          "UpdateChar",
          "#=q9kl5SZeUeIanHPXqH8Byvg==",
          "#=qg8F7l$fE22BW2JsfOcHpQA==",
          "Close",
          "#=qLt1igOtnjDbO40cq0340qg==",
          "#=qq9v5LklzRMUWeC0fX17u2w==",
          "7bocd",
          "#=q7SFZv3_X1jh__i0qS$yTrM3aMBoo7MMGOOAa9ltriPA=",
          "get_UTF8",
          "yz)X:",
          ",aNu^",
          "System.ComponentModel",
          "PADPADP",
          "SuppressUnmanagedCodeSecurityAttribute",
          "#=qqH0HzK5dpalJBOwa$wm3qg==",
          "ToString",
          "#=qyyoWizFgb3s$leRoJx8tVA6$nX314Se8B3eVLLvmYmg=",
          "#=qD_tmohqZXqQNhfRrQTYMfA==",
          "wwwwwwwwwwwwww",
          "`.reloc",
          "kNumMidLenBits",
          "#=qPS5ww9Qh4Qg1KnC9SiWQMg==",
          "LegalCopyright",
          "#=qgfJt9ZkqNp_s2eN$EF8lRoKBGN4LufTLNE1dmIBIf28=",
          "CompareString",
          "w,koK",
          "#=qykGtg3M9D9MTgOzaJO5xlg==",
          "(P~GY6*",
          "w,,p\\Rn",
          "#=qlZpTa_5oxuNhvwPl6FFKJg==",
          "#=qSq5zYE9oYXENFbc3V2Pe6w==",
          "kNumMoveBits",
          "_cX*n",
          "CompilerGeneratedAttribute",
          "#=qajec5milwVsqpbQNJ3pdAg==",
          "#=qE9U$URsu_c0Ig08qpeApRw==",
          "#=qxNAiPpjp2npMNB0TDaEubA==",
          "Equals",
          "#=qJuchJ7XfDSJXhX78ouEvSDi2Fm4IZfphEm1lxVR84W8=",
          "Extra",
          "#=qtdpI8mE0PC7HKAm0rggvhIxya1OU5XWEFr8n2AbzdwE=",
          "#=qbDWEs19y0rXNZJloHjyEAXFFSfYqbb6nrn10YnV15GU=",
          "inputBytes",
          "#=qyM4k7EGb5X12gk8YOkeNSQ==",
          "#=qkQ6DX9hRr8CpN4pCprp8dKTu5XpWEUA3fFuODRBQebM=",
          "SendTools",
          "#=q$ga0JQ2t4Nzt317dL7s1HA==",
          "#=qFiQXtwwrpPrf6i6Nohe$2A==",
          "#=qizSuKVUZWi22rIa8Z61Irg==",
          "ContextValue`1",
          "SetValue",
          "ResumeThread",
          "#=q6Yv$G4eHDn8gxVVQ7jH00Q==",
          "#=qaeAZ85IK9icf1hoO$eIUgQ==",
          "#=qTm4mE2BvwyQu9opBPZoYvABEXk1NdIbQ5LncPq_d5OQ=",
          "ApplicationLogging",
          "SetLiteralProperties",
          "#=qaGMznr3c$ok6TsLDKsBgpA==",
          "#=qsWLw4NosPP1gi5wOWkKQoz05m2lejq$6CuB$iOBB3AI=",
          "#=qGgwwpS30yt7z7wmA5NNa3g==",
          "_Lambda$__8",
          "#=qHJ9pmoIz378G1x0B31eH2CidaiOdV6DLfrtp1WQ35Q0=",
          "&&+%}!",
          "ReadChar",
          "4qiu%",
          "#=qNkF4$24brNGyMOYlUQj393pFEgGc7yicoZSTjZc2U_k=",
          "#=qt6bzCtEoNTvCkJX9j_4kZA==",
          "get_LParam",
          "#=qBTBFzfYdUs1kd$sDfT5Epz4Tl8141_7UIrCZjDszn5Q=",
          "v2.0.50727",
          "BlockCopy",
          "#Strings",
          "System.Collections.Generic",
          "#=q93VKpOIqdRN9spJigbfgrQ==",
          "#=q55q3lEdynyzHRQ573ELk9w==",
          "Ag<@+[",
          "#=qkz0tRkb9CLbnp8T0rNs8bD38RdjxjzMZ5i$ZzJHTh88=",
          "#=qquAKrvKQMWW7XtSurdlOiBConuNVZHvcIKParMXA0xo=",
          "#=qKdosTQrPrTm1tOzWi7_fuA==",
          "#=qfcadZftcNHMdcc$N_OWH5w==",
          "inStream",
          "ConnectionFailed",
          "Ru0=?+",
          "#=qTHk4ibx53ALvuTHC2wskqA==",
          "NtUnmapViewOfSection",
          "Replace",
          "windowSize",
          "set_Item",
          "!This program cannot be run in DOS mode.",
          "EmailClient",
          "get_Handle",
          "get_Msg",
          "GetTempPath",
          "#=qnWasDZNfCexjVbIXlOnpIw==",
          "ToInt32",
          "EndOfStreamException",
          "Compression.RangeCoder",
          "k,(|T",
          "#=qQJH4ux8HloTlAflsU0KOQw==",
          "_Lambda$__6",
          "DeleteLogs",
          "m_HighCoder",
          "RuntimeMethodHandle",
          "m_IsRepDecoders",
          "#=qSNORDi2PZ1IaS6Ix8w2Ovw==",
          "DirectoryInfo",
          "BuildingHostCache",
          "#=qsKOmOA5TX7dlM04qtgpOst$qgth3kf9KZZgdjC8x01c=",
          "Buffer",
          "#=qqj_P$pMjCtq2aNcNj2bfvufyGKfRlrOOaFr$XqaDVXU=",
          "#=qPiY_FtDE2jSdy0HqtmetjQ==",
          "#=qb3mKZgoJuDEsFa1T9bEUEXgvprlgegmeeniWKKiLI3E=",
          "value__",
          "#=qoqavODXRVVim6fghcoKuUg==",
          "GetValue",
          "#=qxTs7FlUCrQFGhk1vAwkrww==",
          "_stream",
          "m_PosMask",
          "#=q$lT2sqOctP5oFLjWBJEQs0BRL9aPnJgXluSQmhlzNCo=",
          "#=q4Jhplum5EMsDzltMg_L_tgoPjr8zzldX6k5uL$T8QHU=",
          "#=qJmGC3VRVk1ET7LjbQuMLjv1DeKxnDw1Daxs6uZ9$FGs=",
          "RuntimeCompatibilityAttribute",
          "h[S:<",
          "Download",
          "keyState",
          "numPrevBits",
          "SuppressIldasmAttribute",
          "CommandType",
          "CompilationRelaxationsAttribute",
          "fefeffeefXa*&+",
          "#=qzmbTPkKexQ8AS0E1MhJt4_A4SKpUh8ZeSD1Jy_XS9eM=",
          "ffefeeffe",
          "#=qTvTlfv6UWF8IdF6Zqmb35eNfTGusCMVLLnh6QIr8tfc=",
          "ffefeefeffe",
          "#=qr0WxpkU89pDBkkfgDoLSTA==",
          "#=qAtoFurjRifVD18ho1R1Dg_WU5nSHW_qH7pBxN8aFTXc=",
          "get_Count",
          "GetFrame",
          "@pd/\\",
          "#=qTSHkb7KjuVyqS$aEfJJbZSroTPY6PUlDcdx_paGstVs=",
          "J$xgm",
          "feffeefefa",
          "4.0.0.0",
          "properties",
          "#=qA_ED7VJLXZPPKs12VIDWHSI60qb9KWEC_8LLPE2krW0=",
          "#=qxwLQaLG4uRX$LJGVfSKAwQ==",
          "CreateInstance",
          "feffefefeY",
          "MultiThread",
          "message",
          "ProjectData",
          "count",
          "posState",
          "#=qv7_G63PaFeyDwnDCC1g_2ru4l8PEzEzyOErEaKVPipg=",
          "#=qHhkScXruXZT5J3Z7jSiQgw==",
          "Compression.LZMA",
          "kBitModelTotal",
          "UInt32",
          "#=q9Faq5VxEeRCgWA$Fv2CQA2jL$TcgdmVDlxlkstaRIog=",
          "_Lambda$__9",
          "!z4V0?U",
          "MoveNext",
          "Monitor",
          "MySettings",
          "#=q4$epyV0nlPzbnzRsMLPu97OYyrwjvDZ_OdEY8a656zU=",
          "ValueType",
          "Round",
          "#=qIkSGT4qbCtcFRC7mMAAYkk84I1ZFkrYif3TMjD7ZPA6BOJlmCB8mpgUoVIHLwXka",
          "System.Windows.Forms",
          "ResolveEventArgs",
          "ApplicationSettingsBase",
          "#=qczls24TWLmlr2uaF9Rt2wA==",
          "#=q29P5wT0RtOGJtLYYrVuOyQJYKodBvb_Va_4aXFXskAY=",
          "NextRecord",
          "JpWt*i*",
          "Delegate",
          "inSize",
          "&&*}R",
          "~B)^VO$",
          "#=qm6zrH0rCSTx0zj182i8NBQ==",
          "#=qZov5VwasIgllCy$iPN3DNw==",
          "#=q7rWPYdgZxY0QTmTQR2fgkA==",
          "user32.dll",
          "iiyAt",
          "b`*&+",
          "}uS(zOQ",
          "Assembly",
          "#=qoKX_5NDx$uDAqG3r2Qdnaw==",
          "GetThreadContext",
          "#=qWToN2VSuMj$dJ8jwWVWiOw==",
          "m_Choice2",
          "UInt64",
          "#=qxBa98CfPwuO0cLdTtVr3UZ7sHS6clgMQTcxeOGfq1S8n3UU_wXWw5dLM3IIxjN4D",
          "12.0.0.0",
          "#=qCourOFK6$KSegqeVRJ$n6Q==",
          "Stream",
          "T{K+d",
          "NanoCore.ClientPlugin",
          "#=q1WnXnf5Kn3oZdelfZ9atXg==",
          "IClientDataHost",
          "System.Reflection",
          "get_BuilderSettings",
          "_Lambda$__3",
          "#=qufNwmAe7HQFIL14z99jHZDphg_1JvBp18S4ZB_HYCGk=",
          "#=qG3u5K_RNSi5MmPk5qGfBKA==",
          "#=qJOuiYi3iPZ3uVqoeKGMDrA==",
          "ObjectFlowControl",
          "#=qyEh7zio04YwNJbA3DRAL$w==",
          "LT/a%u:",
          "#=qbnS0OHMEgVPpx0TYW6jRag==",
          "#=q8gDcBSsTQnbm3KE02hl7OA==",
          "&&+Y}C",
          "ISetCoderProperties",
          "lParam",
          "get_Name",
          "SetPosBitsProperties",
          "#=qBC03ja1g7$0w$eh2jRxaQNyDuxwUf4rZ75JN5N$kch8=",
          "m_IsRep0LongDecoders",
          "#=qtR8C6BNO$zdw_O10qjEjJt6JYi$bG2X1MWCDgpSA5qI=",
          "Create",
          "RuntimeTypeHandle",
          "#=qLIG6VCTYxG1r34UESHGfO1ahvp9wHKfNE5aXgNksRVfBCY8bC6m10KiOo8KoXWAp",
          "SeekOrigin",
          "WrapNonExceptionThrows",
          "bufferSize",
          "get_TotalMinutes",
          "#=qX35LozMOnZ3iEnR45ploWg==",
          "HB:9/",
          "DebuggerStepThroughAttribute",
          "#=qcxNEmoaEf7Zh660RKW2dVQ==",
          "#=qlvbeh6Dpr600MHBhM5FM6w==",
          "EditorBrowsableState",
          "#=qvSf5MwzG8n0SP5HzSY2_SA==",
          "MA1O@",
          "Int64",
          "#=qatkJDnqMuS21CiNfog8F1qvM$VR71IK88NPDErK$cCY=",
          "DestroyHandle",
          "processId",
          "Microsoft.VisualBasic.MyServices.Internal",
          "#=qOGgnVTQ4xQCpfQDFVMvxDA==",
          "aqhgV\"",
          "System.CodeDom.Compiler",
          "System.Globalization",
          "#=q9xDVujoZXiSgiL5U3Ms$Ldw_aEku$YcJRTx_3Mn7bUU=",
          "VirtualAllocEx",
          "#=qWOxGbcFRgf83Lr2nIvLxMhjnXfcYgGMTYJ7wrFJ4zpU=",
          "get_ClientSettings",
          "removeHandle",
          "IntPtr",
          "Double",
          "#=quC7pb_XLQy2zPy$IHptd3gII7RxTbEmajVwI2QM2uDw=",
          "#=qWAKUq9CUhmQBqBddF0P5WA==",
          "#=qTVgha2c6EXq6oFogWKkJ$Q==",
          "kStartPosModelIndex",
          "IEnumerator",
          "#=qjfIm1PIGR6WF2vcep8flyA==",
          "_streamPos",
          "Timer",
          "#=qULF9QYOA4w2wDOoaAUQxV_zVQ8z$1R9w4sOnYqGnVZM=",
          "Assembly Version",
          "5Hyt)",
          "#=qYZPuHqYnW$Jt8HuO33EgZYVEW2BLvhWvH6HqYkna1vM=",
          "SendToServer",
          "#=qHs51RKHMwfV41Mwh991L9yGwclD4RD8GoEI6P7yiHCQ=",
          "SurveillanceExClientPlugin",
          "KeyValuePair`2",
          "#=qGlAaJxWXqCLviqDPasqF_1pEmmsHiVpOlHTQMftJNnM=",
          "LenDecoder",
          "#=qEwOBNFc9PVbJeL2o1SylSw==",
          "Clear",
          "#=q9d$pwaibXpl6EYmDW3LQyA==",
          "m_Choice",
          "#=qYczMyu4Q4ODpJ8_8yaxacw==",
          "#=qyM8Yaoy9PKeQBcWclAVdrdWwWFIiXRRFb3afnMytprg=",
          "m_MidCoder",
          "WndProc",
          "m_LowCoder",
          "#=q0sFoUO5oar9qfDXWiIsjK8QBKipcWLJeZEeGAn3jKTY=",
          "#=qoSjdpFhHgKw4ZkLE7HcUsA==",
          "#=q_0ryHl9Z3pX6cTMt2fN0mgWhGzumbPaq9sRkBsl9r8EcjEOO0EVuY7FHYqQczjcm",
          "IDATx",
          "ntdll.dll",
          "InternalName",
          "EKL={",
          "#=qXt41o0joH7oimdyJLyAEgb0$SgCvft18unPo3p7oDZ4=",
          "#=qErALxYBxbcQx7$wpILZasQ==",
          "GetExecutingAssembly",
          "#=qWLNfsz9$tdJq5W5eUmCK3g==",
          "Decode",
          "Usage",
          "kNumLitPosStatesBitsEncodingMax",
          "#=qniVQeVyK34aPdgdXRnruaUQrXw0DTGkycv51vldfdvs=",
          "_Lambda$__5",
          "State",
          "LiteralDecoder",
          "ffefeeffe(q",
          "mFLGG",
          "MulticastDelegate",
          "ClientPlugin",
          "title",
          "ComVisibleAttribute",
          "LayoutKind",
          "w,D.F ",
          "\\eRsH~&()",
          "SQnYq",
          "m_PosDecoders",
          "EditorBrowsableAttribute",
          "ReleaseStream",
          "#=q6edtgiaCLUi7SoZ61U8urA==",
          "_buffer",
          "b`h*&+",
          "#=qWOXTw_dLcjSXp$GN$pp5S1OPD7ZPz6$b2UbsKnONIhg=",
          "GetText",
          "solid",
          "kNumLowLenBits",
          "ICoder",
          "DebuggerHiddenAttribute",
          "ConnectionStateChanged",
          "#=q8DCG8ySziWq86pz6M2Nm1Q==",
          "#=qqUu6BRNscFAOfPTSzNJT1w==",
          "#=qqq0n2rS1_M7ChN0lsGOjWw==",
          "Window",
          "get_TotalSeconds",
          "&&*}5",
          "#=qWtdqJYyYX8j6Z3apMuSRyQY12glbN$YmR9vdImzaIBw=",
          "#=qG4$BfgVthjPwAu6cOeCEdA==",
          "#=qOkM4_GL6iJytfvW8X1Vv0JdORs6j60y4sZk64fltjPs=",
          "scanCode",
          "#=qH37BJRRVPDZdt_HquyjQCGhaKFyNxp4uozln_BmzbFU=",
          "ffefefeeffe",
          "NumPasses",
          "#=qaiFlnK6gufs9y1Oc4GuIMH251NlpwpnIGxTExPappTg=",
          "Di'8f#",
          "#=qjGf0Fo7ouDsRFksxehS1LLJzkD032TzIZQYMCq6zXPU=",
          "kNumLenSymbols",
          "#=qxNhCtLFT$uaHlRVrjNRfgQ==",
          "#=qNOZ9w$DcFPd9SOpnZgS0RQ==",
          "#=q9d0qL0bhhHsukDDuSglJm4WCBbjzHE0Bbid8Pr0XWh0=",
          "MyTemplate",
          "ArgumentOutOfRangeException",
          "#=qV79mcqV34cKRcC07zX3EAg==",
          "#=qgf2HF0U91g7Z5r3b_DTKKen95XyoRNKhJT0tZAdh0qE=",
          "GetName",
          "ClearProjectError",
          "#=qBXqRL3Dv9U6yo_YJzVNueLigr3DbGSqr8_$nTSKtZ2s=",
          "StackTrace",
          "outSize",
          "#=qPvYrleetOagqdcI9DE5KLx58LE24Y4CctC7$504MDk4=",
          "#=qkt_liXOxhoHW1IdbL3VH8w==",
          "#=qh9ajRGk2_65Q3Jd9wgongg==",
          "['c*a",
          "ClientSettingChanged",
          "ThreadPool",
          "threadId",
          "ffefeeffeXa",
          "#=qt3y2qSp0dv0vJPWjVw3zrUaK5pF8MkrfIOVi6473g$4=",
          "RuntimeEnvironment",
          "#=qr01FMUeoBCjkEqS0Tv6eBA==",
          "ViewLogs",
          "#=qc7jxesQacILbzixeNG7FgVPmFPAfjvpvdnuAU2yopkw=",
          "#=qTDB6veXFhv3LJZPZLsXjAA==",
          "'b(?P",
          "StartsWith",
          "System.IO",
          "lS]@\\",
          "#=qa5bWbwMs799DVwO6Xd1rN3bJzFHKr4_gzkvb0x1jS4Fq$eNnm1UXtsC$gMpO485Q",
          "#=qynZM5QfSMAmkvPfv_N252H9sirBUdDlLNsjX68Ie$iw=",
          "-b&(f",
          "[@'s8",
          "StringBuilder",
          "get_FullName",
          "get_LastWriteTime",
          "#=qnsLPayfk95jd6qjcEgWvsg==",
          "#=qkJLhjNBL62x0Maq56Qyxvg==",
          "Regex",
          "GetFiles",
          "Invoke",
          "qL88<",
          "nC=\"kO",
          "#=qISpXJwqB9eU0aC9WFSg0Ng==",
          "ReadInt32",
          "ep&L2lT",
          "@o$?H{",
          "Remove",
          "#=qsbY2J0lq2mDKdHpdoqFbhILxgHjBTI3htQgLDLlw4tw=",
          "DateTimeKind",
          "#=qy62TL0vimm$9c8r9cknBlg==",
          "#=q7yeIS$Nxs6vRTxwkrC3NI7XBjBtanYpAY7F6lpVJMNs=",
          "get_WParam",
          "o3K=M",
          "#=q9MSpJ0C9gy1tNtiHMT0xuOhK0eh3XkuUCIUdV0CL_Vc=",
          "feffeeffefe",
          "#=qDryb$Lj81YuexT_kT546UteX3jn1a5MWE58jzYBzqzA=",
          "kNumAlignBits",
          "m_IsMatchDecoders",
          "vD|Jy",
          "get_DeclaringType",
          "#=q5LicbGLyNvYH7rAg86LLew==",
          "#=qd8PFK0o9ZmfLuRvVs5TueBqBiNJMAYg6mfAY7qPvztw=",
          "#=qILpIzHL2R4oZr_xuJ35Ks0Qv8efeDFq9$IysEjhmwb8=",
          "#=qXwgB3iQRF3f74mr47OcIXA==",
          "Format",
          "#=qbaeFrXHqfUmKDWhl$m1oW1YJ6aPS$T3nwSKQdfykURs=",
          "IClientUIHost",
          "K.^^0d",
          "Pd5iG",
          "#>6Mzf",
          "#=qbt21$tSdKp3amqFUQffN4g==",
          "#=qmAOt84hQOfmqpLQTy_m9Gw==",
          "MakeCode",
          "get_Chars",
          "w,uNm",
          "#=qJLhNEnVZH5g1ZqJMJz$RzYGuUiBvJ7jvAqqxd1jmI9w=",
          "SetThreadContext",
          "fefeffefefe",
          "#=qoOW0Qs7uLOIFAgZnF5WYag==",
          "IClientNetworkHost",
          "get_TickCount",
          "KeyboardType",
          "AssemblyCompanyAttribute",
          "ResourceManager",
          "_Lambda$__4",
          "RawInputHeader",
          "fefeffeefY",
          "#=qfGRrfgRh9ShPgCgw1WBGlA==",
          "UsagePage",
          "#=q8kI8WUAO3EIwh$dDbLO4hBJVnsPN1Kf$8oLzDKgLItY=",
          "GetEnumerator",
          "m_PosStateMask",
          "GetPublicKeyToken",
          "defaultInstance",
          "Dispose__Instance__",
          "kNumPosStatesBitsMax",
          "y/Tbb3",
          "#=quNCOqLbHCNvjlAK7Bf3cDbhyHY_4LIdtbLCWmQ_qI5Y=",
          "#=qcoWy4j$hfMjQGUjg7sMLcA==",
          "#=qqAcSxqYR8KvfnXGv78vSLpHnokxYmR2kdhuhJW9_ry8=",
          "#=qamafmS78hoJBlTvbicCkog==",
          "#=qFFTan1UEcEUWGr2OOrOYjJGYp4rAAjZjzwTWUS0rVrw=",
          "#=qph0dM8ScBo399Qc8dFf7SlZHZ5$T9MiuQgUb1gNxX6w=",
          "#=qafWoeWm0EJ5rJHlvMm4iDkNn$EYGciEBRwJDLt7$nbQ=",
          "#=qVJN_4jIyRrZ5yAy$Rn5RLinbGCq7szN2kXQqx5f3mq0=",
          "ReadAllText",
          "tuerl",
          "ToArray",
          "#=qbXdnCoLjynzf7IU_sWtIxQ==",
          "get_CurrentDomain",
          "FileAccess",
          "#=qnkToepswNMS8gbnXEvMwzMYEEKNiPU5uDsX9dRhrWNQ=",
          "m_Coders",
          "get_Default",
          "get_IsAbsoluteUri",
          "LitPosBits",
          "4#Q22",
          "Empty",
          "#=q6PBQzT2s0OXAPNX0HyA9nA==",
          "get_MetadataToken",
          "GetCallingAssembly",
          "ReadPacket",
          "#=qB_ief8yBaOrLHFWAY1qqaBDkGFE5diWAXZyimYvjzkY=",
          "MapVirtualKeyEx",
          "GetWindowText",
          "BU2l$",
          "#=qrrF6$_dvEtwtuQKnJBulHA==",
          "#=q$SxR33u2B2QKyvTy6OUx3VUEnsU1BBIwrFbNm_dTmvc=",
          "#=qQ0_U51a7sN5obfKsBtIlCA==",
          "Int16",
          "WaitCallback",
          "LogToServer",
          "#=qjw6ERKjxRJyhmlKKhTbkm3qZjjnDTqlES7REqNxqUOg=",
          "get_Item",
          "UInt16",
          "#=qyGd52xKGg1UK99QpoNpdz9dSKN3tgIE6mEvh5axkN4DdSC0KoH7ndNvZZfDKjIAY",
          "Mz&?8",
          "ffeeffefeef",
          "#=qy7iFFOCv78505n$_BrNPxRrFO5LEklS7ID6JkyE1sJ0=",
          "wParam",
          "maxLength",
          "fefefeffe_-",
          "get_Now",
          "kernel32.dll",
          "kEndPosModelIndex",
          "#=qBUViwm1Wzov4U2EcqfWHEYm9yRhCdBkuxxjXALmkpzo=",
          "#=qVSN1Lpi9mDmMGgmaAHvebQ==",
          "get_Size",
          "get_Variables",
          "pI,4711",
          "AssemblyTitleAttribute",
          "#=qhXmGn2CELzUWoG0JCIbI4w==",
          "#=qUto48Jl62GtgsCwHVL7Hgg==",
          "Delete",
          "Dictionary`2",
          "#=q0XvCVIzf4UbwwbesII8AcyVgrM$fv_y6$FjnV7yW05Q=",
          "IJxFC",
          "-H%a=",
          "get_BaseStream",
          "#=qkyQiUlPlMKotWknoHqlomhKQpOjgRch0EcZ31P06MMc=",
          "Dispose",
          "4UH@9JE",
          "B.rsrc",
          "matchByte",
          "TimerCallback",
          "fefeffeeffe",
          "MYkv[",
          "#=qjTb0yKP0PvX_$sNLZrWc3SrhKi2B8TapGYB0qQ_d2ic=",
          "NumFastBytes",
          "#=q2ps$7ibfUjB8cShObHpkOw==",
          "GetRawInputData",
          "GeneratedCodeAttribute",
          "#=qGbx9gQEhahxfxQgVR1WKYA==",
          "kNumLitContextBitsMax",
          "#=q1E8O4JTltplIX9hIlv2U_fvNRBdciVrREW4_qwWnAG8=",
          "#=qrGwSUb5xTQIFyn575GZnPg==",
          "#=qeRlDn71ka07USXFfJJUR2tjdNrp$C8rMYT7zAiVKaFY=",
          "#=qho_BPlTxogZ6unjnM3aUEA==",
          "qKsP&",
          "#=qjnoznhVPIrOVW7AdFC20oQRiO8PwCQlyil8yL1Vu$kM=",
          "KeyboardLogging",
          "u[AF7NM",
          "#=qO6x5ewjr4GGgRnaDV90ZlA==",
          "DnsGetCacheDataTable",
          "GetByte",
          "#=qXaCFAlCJk0zL$1TRW78z2TZB6TE_kmNEDibtTaGwApE=",
          "op_Subtraction",
          "de!#%d",
          "#=qMUhpaeAQYPZGtrQ6m5D8$T6a5UohdjKBly_QCCrNbic=",
          "#=qYf8VVQYyVIBbHqbd$XL$cA==",
          "Decompress",
          "\"zD_2",
          "qHF>7K",
          "#=qyJGUlE1_rLpfgGH0HVA4uA==",
          "#=qzk3NeGOwuEBmY8yfhx9RGeCtT3ElsluQSWlGax0FSTg=",
          "layout",
          "#=q463flxIG4yBvVk$L2nY$rA==",
          "#=qkArXx5faq_yiVVDZVy8zPg==",
          "#=qh0PZD5Xzw4GYzrxwVJgNXdBLljub_GVfhqf6qMZuuOM=",
          "#=q_kf6X0FJYJ49vkYU3o4hF4ABiUFCz_wIANIlPo9Wtqg=",
          "#=qZDfXudm0$xsDWCHGELpd5JJQykxvZE2iCT02xHzYWZs=",
          "BinaryWriter",
          "#=qm8f9k1aXVtORA4naJCkxW5anSegBcHo_NtygLkyg$zI=",
          "#=q4w8mBBo92N6vPz_rEq4NCg==",
          "feffefeefef",
          "#=qGqoN6NYMG6qhAx_trPC_ossyh4syAKivlJ4ofRtY1Bc=",
          "ICodeProgress",
          "String",
          "#=qU5Uv$YfWv4YU_tU0WnuWRQ==",
          "#=qm6w5$AGhTmDiKS6fDc_8lQ==",
          "kTopValue",
          "Append",
          "numBitLevels",
          "#=qwRLyHsQEgr3hVfF8nnZ7KA==",
          "#=qia6Q_CLWGyNlq5m_x$gzsg==",
          "get_Host",
          "Yaa*&+",
          "Range",
          "#=qUByjqwT1e89jxnX_MQXMWbKNidprz_QzC__AUDqY7Uc=",
          "#=qt8g2vpq5xuzYmHVNoc4aRQ==",
          "#=q5B2i_ZFG$fkyLcTMcIhd9w==",
          "QueueUserWorkItem",
          "GetObjectValue",
          "#=qhketRNLRWT8CVAmblf0IwOvCoFFzVqRP3cb74HV_KhA=",
          "ChangeExtension",
          "#=qmhUzkJg2ExNnbX_5KEDmiQ==",
          "#=q4XS3XWwqg0cYnVCF1ZC2NbwZSfEBY5biSs$73sq9_qY=",
          "kNumFullDistances",
          "#=q_EpKD6Wcn8v1q27F7Au3V2_q9nsNwbRHldZOuKkGS9M=",
          "GetRandomFileName",
          "&&*}8",
          "#=q5g$eC0ljHvRuQ5Sjg8qhXD5ifXDj39Cm6o39Y5BwaAc=",
          "#=qLpgJeYVNxM5InVOGfQCJgQGoJXhVBZL78RSpTucm8vM=",
          "<generated method>",
          "#=qR6XN5QQYUNdzcxSpOeojXw==",
          "#=qRkVCQkwYopuW3FhsOB8R7Q==",
          "distance",
          "X!RF,",
          "V\\CDo",
          "#=q79jR0bJe_Ob_U2hce_Wy2KY4qSDCR$4x41oNq35cm3Y=",
          "#=qay1xmyx9Oqat62Q8L3hW8g==",
          "ContainsKey",
          "GetState",
          "#=qGvdgcYjJPldjZjV15YO1AQ==",
          "ContainsText",
          "#=qKkT5k_oMJ5jlOboYqGKerA==",
          "System.Diagnostics",
          "Marshal",
          "IClientNameObjectCollection",
          "SetProgress",
          "kNumStates",
          "#=qZDaMo8z4aSDSIJR8FYpOIWr2QgacQNuQzvtxGLdfriI=",
          "#=qE$fiW9I$YR8wzvprmP6GMg==",
          "IEnumerable`1",
          "ReadProcessMemory",
          "numPosBits",
          "#=qZVAY6xaoFDtd779Ohye_i7puUwiqn0vUdRn2mygGXjk=",
          ".ctor",
          "SetProjectError",
          "\"!&%'%8797:7;7",
          "#=q6cFrjMmsBzZaHdwkK64MvIJCVps43s79Zoc5jAQQ3B0=",
          "UpdateRep",
          "LogClientException",
          "rawInput",
          "DebuggerNonUserCodeAttribute",
          "#=qTmPD_08CamgMljHM9Dk1O8BoSybsXHEUiOmZnlrjslQ=",
          "#=qncI$$cNGF5Pots4RoA2KEQ==",
          "InternetBrowser",
          "StringReader",
          "AddDays",
          "ReferenceEquals",
          "GroupCollection",
          " :hu'a",
          "CLSCompliantAttribute",
          "virtualKey",
          "get_Groups",
          "Reserved",
          "1(:>/",
          "#=q3i4wls3IHcjOio705aCSHg==",
          "DataLength",
          "AsyncCallback",
          "#=qiw21QRsOuXRsr0EoFXe6yg==",
          "<Module>",
          "StructLayoutAttribute",
          "UriKind",
          "#=qbb8M4CbvbU9dtw7rljxsOgowhtC_M0HHHYDQvfbewMA=",
          "!:6=?J",
          "SizeOf",
          "Conversions",
          "numTotalBits",
          "Synchronized",
          "%B!eu",
          "StackFrame",
          "RegisterRawInputDevices",
          "FileVersion",
          "Decoder2",
          "ClientInvokeDelegate",
          "get_Key",
          "CreateHandle",
          "m_IsRepG0Decoders",
          "BitTreeDecoder",
          "CheckForSyncLockOnValueType",
          "IClientNetwork",
          "#=q4Nr8w$2KKfb5UztnulwYRg==",
          "kDicLogSizeMin",
          "PipeCreated",
          "Intern",
          "`.rsrc",
          "AssemblyFileVersionAttribute",
          "System.Threading",
          "ffefeeffea",
          "UpdateMatch",
          "Encoding",
          "IsNullOrEmpty",
          "#=qkmhFErk5YMKo51GKKlhE9g==",
          "StringFileInfo",
          "m_NumPrevBits",
          "LitContextBits",
          "Write",
          "GetRecords",
          "#=qrs1kHm2Vk1lgdS_uku1L9g==",
          "#=qMJgjQNh1HDTnQhoJXfa0WA==",
          "ReverseDecode",
          "AssemblyProductAttribute",
          "#=qPRgfS7lOTcyHKSlbB8xgkA==",
          "Microsoft.VisualBasic",
          "AppDomain",
          "#=qT1akwluU_CPHm0nhoKf6Rw==",
          "#=qfisk2$Joqzyumzd6fh2dOQ==",
          "get_Length",
          "#=qvfRcdVwrMsCxkiqADFMhLstfJFNrXezVOSkR7LYl6_c=",
          ".(\\iF",
          "#=qhY91O0Ehtf92oxnuh2FVz3zwgJyjBwDokEEXjvLvO6Q=",
          "feffefefefehah",
          "Win32",
          "z0v{1*",
          "#=qvvwoAYTFwjESTUFg0fNF7SLde7qYhx8qSoPZyr3HMfc=",
          "Contains",
          "BinaryReader",
          "ToInt16",
          "L269a",
          "VariableChanged",
          ",?eg!",
          "#=qQqcsGt5b2PDsslTZJ$dt_mKNdeXa0POgZBx5R0LjlPM=",
          "#=qw9VSFm68B5Ljl$xHUUa_Hw==",
          "get_Assembly",
          "FileInfo",
          "#=qbbS2gH77jp8FUp6F13JpY6MGDSb9v3gnCOBNgbF7cVA=",
          "GetHashCode",
          "kAlignTableSize",
          "m_OutWindow",
          "m_DictionarySizeCheck",
          "#=qpQr3Y9fGkwa$qRqPoCizPZ9VR0dem4a4NMuT_i6c3sQ=",
          "#=qUZFlYoOocheA6eC84I2B1Q==",
          "MemoryStream",
          "3System.Resources.Tools.StronglyTypedResourceBuilder",
          "#=q7_TpaeFTuHRPDnfbdnzhMw==",
          "IsControl",
          "SettingsBase",
          "Change",
          "#=qXH69A$_8u_BEH$6TuzFn6w==",
          "m_RepLenDecoder",
          "#=q5kTowhAuuSOCKCKI6_gw5Q==",
          "Activator",
          "#=qrrUz6hC0NPP229srrATMtK3maxNKi2E6oaUoFmACl9I=",
          "DnsCommand",
          "wisxa",
          "GetKeyboardState",
          "Flags",
          "#=qVmsOOzNjkaQuSyIKz50umg==",
          "OriginalFilename",
          "BitDecoder",
          "#=qeZCoccI3yJdWJ3ayrHW$WA==",
          "kNumLenToPosStatesBits",
          "UpdateShortRep",
          "#=q7xw_62wJAROEdfmrcOfU9A==",
          "#=qGPyC5Xsppd3A9GM1nbF6UA==",
          "#=qz_b1L2sFeS3InI52Fcb$xw==",
          "WriteProcessMemory",
          "kNumBitModelTotalBits",
          "#=qhe3YBArn2XZllRv5mtI$IA==",
          "-7& G",
          "ToUnicodeEx",
          "-=&~L",
          "System.Runtime.InteropServices",
          "w`TeE",
          "#=qUUTENRjCs2Tp8v$UkD2pyj$_WERyijyYrwjs9ap51Bc=",
          "#=qYnC$MeSjL22yOmZmIH9O5Q==",
          "flags",
          "add_AssemblyResolve",
          "SetCoderProperties",
          "Rz4Zy",
          "Decoder",
          "#=qA6W6GWeKbpqYNXHHn0NOqQ==",
          "GetManifestResourceStream",
          "VS_VERSION_INFO",
          "#=qxPKYwApYHsDUAngYujXcMg==",
          "feffeefeffe ",
          "ISetDecoderProperties",
          "Combine",
          "Create__Instance__",
          "ffeeffefehah",
          "Computer",
          "#=qHULrE3ucj3pP3z4Q8AHNQ6f7gkmXn_0Fohqp275LJtI=",
          "m_LenDecoder",
          "ApplicationBase",
          "#=qL4z9que7yasXNRV3gE808Q==",
          "EndMarker",
          "#=qbxOnQHmVH_9KW47BBLVbiw==",
          "ReadString",
          "TmYM>K",
          "E'Y=u",
          "#=qps$_CRy8QN3tD8_cpxbl5Q==",
          "#=qOB8cEznqDkvIxRcccHlIsv7sC6k2hObkCZSKdkJ_Zsk=",
          "#=qv$8E8sC6lJIPtd2$JZCylw==",
          "startIndex",
          "List`1",
          "Object",
          "kNumHighLenBits",
          "AssemblyCopyrightAttribute",
          "DefRawInputProc",
          "1.0.1.7",
          "w,X8WD",
          "#=q4JDS1p4qILBfxV6iYzPvew==",
          "#=qG0TXdiUc5RapAeqxDJArye7UrdqGI4sA16AWYfcrCf0=",
          "Lzma#.dll",
          "fefefeffe",
          "StringSplitOptions",
          "#=qMaYcsaYwkZMTqb1yZLawvsT_RxwqTAeocZdt0axWTAI=",
          "#=qtnUi7yodyLqv1sucEHesww==",
          "#=qj4ZL7Xa5Jh3aXGsDJ8nwq9Ol$7j95Q2WIH6RXdknYOM=",
          "get_Value",
          "Compression.LZ",
          "PosStateBits",
          "#=qCqIROk23BL$5SZnsNcMGzw==",
          "get_ProcessName",
          "NanoCore.ClientPluginHost",
          "m_PosAlignDecoder",
          "#=qgvFUiZFJ0DnA4jPHJSI0$g==",
          "Header",
          "afefefeffe",
          "SetClipboardViewer",
          ".cctor",
          "NativeWindow",
          "#=qp0rjqvRPFB117u1oIM8eyg==",
          "#=qNwsNe80RUFvWuBVxKYH7CdkcJCEYrUuUzsDzmfG3Y0f_hVViDx0xK8xqdS9y79EZ",
          "Enter",
          "#=qMb7ah3f2LZnw5uZZ2MwFiVVbfzLytVjDFOGKjr3$eXM=",
          "#=q7ZvQqMWc8EiVYIemfr8kugujhdIVidtkVJrdNaMKkMY=",
          "#=qnKfe8RVyBZnzTVIYVRXs3lz7$G7e6QuPxi3Jx3scwJ4=",
          "PipeClosed",
          "#=q8PUUaAp4ut016MmvuKrU1A==",
          "Message",
          "#=qcYLUomKQ3VHSKmjKloHutA==",
          "Array",
          "#=qdLYSf0D2H54oOFJ36kM4Rg==",
          "Microsoft.VisualBasic.ApplicationServices"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 8,
        "cape_type": "Unpacked PE Image: 32-bit DLL",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x07F60000"
      },
      {
        "name": "a5e6546362978d31355aca9b0dcffe425cf729c012e66deb59eb7ae5bb8aef78",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/a5e6546362978d31355aca9b0dcffe425cf729c012e66deb59eb7ae5bb8aef78",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x07880000;?",
        "size": 324,
        "crc32": "F428F4B4",
        "md5": "c657e531fffa97d2e379647c3c998c0f",
        "sha1": "ea150e2c9c53c4b77d7245d3b15372ce3fada097",
        "sha256": "a5e6546362978d31355aca9b0dcffe425cf729c012e66deb59eb7ae5bb8aef78",
        "sha512": "2829dd54c1cff241727863aabd004a8eacdc73281511ebfb0436f6aff635a22305a7afc7085bada20090e3bcaee95aeb33542e980d48fb055b25a05c04143dee",
        "rh_hash": null,
        "ssdeep": "6:GWr+ldO9NlM/PDy4Sa/8lqQ2V6EBl1itZzV07vXLlxM9wHgX:JA2u/bwanrqSl7gX",
        "type": "Windows boot log, header size 0x7880000, 0x1 valid bytes",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T18EE07D2B0C308553CCD941F886E8C3F2F81D0218C1917020CB6C007519161CC4489127",
        "sha3_384": "b45a4938d69e27c0dc6d2aa8a2d48b80aa90e1795266efe5d06670458f241fa63f1e561911a36e6e4a11f9bfdc02a8d1",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [
          "8xsUSVW"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x07880000"
      },
      {
        "name": "be7ca263a502af783d148e1e974f5ae0a964a2b73a4650bd31ff84b2f14c8601",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/be7ca263a502af783d148e1e974f5ae0a964a2b73a4650bd31ff84b2f14c8601",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x078A0000;?",
        "size": 2249,
        "crc32": "1EA7FAF4",
        "md5": "b5f5f7bd55854b42f1587a8d8c7ef565",
        "sha1": "1bfc202402a86e11f702bfae47239800222e5030",
        "sha256": "be7ca263a502af783d148e1e974f5ae0a964a2b73a4650bd31ff84b2f14c8601",
        "sha512": "b7aa6a66a972d1dce360d03f7cb32f64d5ec2962d065c0e1e5dd6c2ba690730bdf7ecc676aae98004e0414620c107aa84e4644a68a879bdde9972aedc52d26ab",
        "rh_hash": null,
        "ssdeep": "12:XJiuyLuOU4O/+SgjG2qXae0bCS23Wa4TOLxiNYZaYb7gVOPlxE4OGloiP4nXLCMs:Zyg+SKqIbCbWanxJAYbc8dFZAT7qhzuk",
        "type": "data",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T174412D26D635A711C0015B3C9FA38B2043A2E80A1A47DA6B0308F87FAEE23F009931CC",
        "sha3_384": "2ab5172d75193a23c367149b863c5d03405c71f7a54db9dfbad189ec9f466114613ba85bea3ca62ca72824b4dbbb443d",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [
          "! #!%\"'#)$+%-&/'1(3)5*7+9,;-=.?/A0E1I2M3Q4U5Y6]7a8e9i:m;q<u=y>}?"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x078A0000"
      },
      {
        "name": "a421fa5d14332f486ba5b5d74499679aab17e99d022e25d0384d0917a615fcc3",
        "path": "/opt/CAPEv2/storage/analyses/46/CAPE/a421fa5d14332f486ba5b5d74499679aab17e99d022e25d0384d0917a615fcc3",
        "guest_paths": "9;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe;?0x04FE0000;?",
        "size": 4094,
        "crc32": "20945460",
        "md5": "3fff894d52e1dd53ba9744b5d223fb2c",
        "sha1": "9081157294333ac6c073abc042314a824178196d",
        "sha256": "a421fa5d14332f486ba5b5d74499679aab17e99d022e25d0384d0917a615fcc3",
        "sha512": "636aeb2816345a1f3106762607d4c4f69668ed0762f3c37e0232e9e7691abcb6bc8c6ac56b034d22bed2989362ff6d47e4b88e74e9ab7dcf2a2b4e6768b4b339",
        "rh_hash": null,
        "ssdeep": "12:9iGQBcW75BxrlOxzwIzR1WKSuk3KBtKbNQ/LInhcq5lzwTZD:955WqDRPk3lb4Ih4TN",
        "type": "data",
        "yara": [],
        "cape_yara": [],
        "clamav": [],
        "tlsh": "T1B581C09C91034694CF547A360E7757135F2DCA4B6FC01B1AA52C576E3F395792503A14",
        "sha3_384": "2317aa84ffb2839529867fb387b780002262415de2277b7f3800a7915d9f4336610e7b74615e2a72cde8a46c8ba5647f",
        "yara_hash": "b833150b13e1662cfeb7589959edd288cf4e73710395ec5c5f2123f39a668f4d",
        "options_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "data": null,
        "strings": [
          "PPPPPh",
          "<xsUSVW",
          ";xsUSVW"
        ],
        "virustotal": {
          "error": true,
          "msg": "VT File lookup disabled in processing.conf"
        },
        "executed_tools": [
          "overlay",
          "msi_extract",
          "kixtart_extract",
          "vbe_extract",
          "batch_extract",
          "UnAutoIt_extract",
          "UPX_unpack",
          "RarSFX_extract",
          "Inno_extract",
          "SevenZip_unpack",
          "de4dot_deobfuscate",
          "eziriz_deobfuscate",
          "office_one"
        ],
        "cape_type_code": 9,
        "cape_type": "Unpacked Shellcode",
        "process_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "process_name": "91d880890f6e481edcbe.exe",
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "pid": 6484,
        "virtual_address": "0x04FE0000"
      }
    ],
    "configs": []
  },
  "info": {
    "version": "2.5",
    "started": "2026-04-25 09:54:33",
    "ended": "2026-04-25 09:59:22",
    "duration": 289,
    "id": 46,
    "category": "file",
    "custom": "",
    "machine": {
      "id": 39,
      "status": "stopping",
      "name": "win10x64",
      "label": "win10x64",
      "platform": "windows",
      "manager": "KVM",
      "started_on": "2026-04-25 09:54:33",
      "shutdown_on": "2026-04-25 09:59:21"
    },
    "package": "exe",
    "timeout": true,
    "tlp": null,
    "parent_sample": {
      "id": 33,
      "file_size": 161180,
      "file_type": "Zip archive data, at least v5.1 to extract, compression method=AES Encrypted",
      "md5": "d1b295330df8e8f65e4b132f059f2aab",
      "crc32": "BD63117E",
      "sha1": "23bc51162fbf1817f0972a86b8536c70304f44a9",
      "sha256": "b3b0246050dbb794423cb3135e229649298d9d5fffb91ace6f513fb7d3dcb8b6",
      "sha512": "586fdd2beeb4ceb7298a92eea92827a073035959dd5c6d8fabb7300637de8818ff1fddb3330fdb3fe34a8fdfe799d969867753f9f63d5409038fc3e909ef9816",
      "ssdeep": null,
      "source_url": null
    },
    "options": {},
    "source_url": null,
    "route": "",
    "user_id": 0,
    "CAPE_current_commit": "a9a0887dab232f52c59e955b9984dd494c47ce6b"
  },
  "behavior": {
    "processes": [
      {
        "process_id": 6484,
        "process_name": "91d880890f6e481edcbe.exe",
        "parent_id": 7304,
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "first_seen": "2026-04-25 06:55:54,516",
        "calls": [
          {
            "timestamp": "2026-04-25 06:55:57,735",
            "thread_id": "6504",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 0
          },
          {
            "timestamp": "2026-04-25 06:55:57,735",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1
          },
          {
            "timestamp": "2026-04-25 06:55:57,735",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x77266176",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 2
          },
          {
            "timestamp": "2026-04-25 06:55:57,735",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegOpenKeyExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe9b0"
              }
            ],
            "repeated": 0,
            "id": 3
          },
          {
            "timestamp": "2026-04-25 06:55:57,735",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417ed49",
            "parentcaller": "0x7416dccc",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework\\Policy\\"
              },
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Policy\\"
              }
            ],
            "repeated": 0,
            "id": 5
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 6
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryInfoKeyW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebeb00"
              }
            ],
            "repeated": 0,
            "id": 7
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 8
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417e980",
            "parentcaller": "0x7417ed5c",
            "category": "registry",
            "api": "RegQueryInfoKeyW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000234"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "SubKeyCount",
                "value": "5"
              },
              {
                "name": "MaxSubKeyLength",
                "value": "9"
              },
              {
                "name": "MaxClassLength",
                "value": "0"
              },
              {
                "name": "ValueCount",
                "value": "0"
              },
              {
                "name": "MaxValueNameLength",
                "value": "0"
              },
              {
                "name": "MaxValueLength",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 9
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 10
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegEnumKeyExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebead0"
              }
            ],
            "repeated": 0,
            "id": 11
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "8088",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 13
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "8088",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 14
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417e9f7",
            "parentcaller": "0x7417ed5c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Index",
                "value": "4"
              },
              {
                "name": "Name",
                "value": "v4.0"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\v4.0"
              }
            ],
            "repeated": 0,
            "id": 15
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417e9f7",
            "parentcaller": "0x7417ed5c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Index",
                "value": "3"
              },
              {
                "name": "Name",
                "value": "v2.0"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\v2.0"
              }
            ],
            "repeated": 0,
            "id": 16
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417e9f7",
            "parentcaller": "0x7417ed5c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Index",
                "value": "2"
              },
              {
                "name": "Name",
                "value": "Upgrades"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\Upgrades"
              }
            ],
            "repeated": 0,
            "id": 17
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417e9f7",
            "parentcaller": "0x7417ed5c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "Name",
                "value": "standards"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\standards"
              }
            ],
            "repeated": 0,
            "id": 18
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417e9f7",
            "parentcaller": "0x7417ed5c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "Name",
                "value": "AppPatch"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch"
              }
            ],
            "repeated": 0,
            "id": 19
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "8084",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 20
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "8084",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 21
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "8020",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 22
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "8020",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 23
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417edb8",
            "parentcaller": "0x7416dccc",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000234"
              },
              {
                "name": "SubKey",
                "value": "v4.0"
              },
              {
                "name": "Handle",
                "value": "0x00000230"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\v4.0"
              }
            ],
            "repeated": 0,
            "id": 24
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417eb88",
            "parentcaller": "0x7417edde",
            "category": "registry",
            "api": "RegQueryInfoKeyW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000230"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "SubKeyCount",
                "value": "0"
              },
              {
                "name": "MaxSubKeyLength",
                "value": "0"
              },
              {
                "name": "MaxClassLength",
                "value": "0"
              },
              {
                "name": "ValueCount",
                "value": "1"
              },
              {
                "name": "MaxValueNameLength",
                "value": "5"
              },
              {
                "name": "MaxValueLength",
                "value": "24"
              }
            ],
            "repeated": 0,
            "id": 25
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 26
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegEnumValueW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebeba0"
              }
            ],
            "repeated": 0,
            "id": 27
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 28
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417ec0a",
            "parentcaller": "0x7417edde",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000230"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "ValueName",
                "value": "30319"
              },
              {
                "name": "Data",
                "value": "30319-30319"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\v4.0\\30319"
              }
            ],
            "repeated": 0,
            "id": 29
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 30
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegCloseKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebeb20"
              }
            ],
            "repeated": 0,
            "id": 31
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 32
          },
          {
            "timestamp": "2026-04-25 06:55:57,751",
            "thread_id": "6504",
            "caller": "0x7417ee01",
            "parentcaller": "0x7416dccc",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000230"
              }
            ],
            "repeated": 0,
            "id": 33
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x77264429",
            "parentcaller": "0x741751c9",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\MSCOREE.DLL.local"
              }
            ],
            "repeated": 0,
            "id": 34
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x74174e1c",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000238"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 35
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 36
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe8e0"
              }
            ],
            "repeated": 0,
            "id": 37
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x7418ec20",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x741ac000"
              },
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 38
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x74174e34",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 39
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x74174e71",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "Data",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 40
          },
          {
            "timestamp": "2026-04-25 06:55:57,797",
            "thread_id": "6504",
            "caller": "0x74174e7f",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              }
            ],
            "repeated": 0,
            "id": 41
          },
          {
            "timestamp": "2026-04-25 06:55:57,876",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x74186667",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c3e3b0",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0x51d5aa91"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01d8c32f"
              }
            ],
            "repeated": 0,
            "id": 42
          },
          {
            "timestamp": "2026-04-25 06:55:57,922",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x74186677",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              }
            ],
            "repeated": 0,
            "id": 43
          },
          {
            "timestamp": "2026-04-25 06:55:57,922",
            "thread_id": "6504",
            "caller": "0x7417ef8e",
            "parentcaller": "0x7416dccc",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              }
            ],
            "repeated": 0,
            "id": 44
          },
          {
            "timestamp": "2026-04-25 06:55:57,922",
            "thread_id": "6504",
            "caller": "0x74174e1c",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 45
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x74174e34",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 46
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x74174e71",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "Data",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 47
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x74174e7f",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              }
            ],
            "repeated": 0,
            "id": 48
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x74186667",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c3e4b0",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0x51d5aa91"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01d8c32f"
              }
            ],
            "repeated": 0,
            "id": 49
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x74186677",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              }
            ],
            "repeated": 0,
            "id": 50
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x74174e1c",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 51
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x74174e34",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 52
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x74174e71",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "Data",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 53
          },
          {
            "timestamp": "2026-04-25 06:55:57,938",
            "thread_id": "6504",
            "caller": "0x74174e7f",
            "parentcaller": "0x741752b8",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              }
            ],
            "repeated": 0,
            "id": 54
          },
          {
            "timestamp": "2026-04-25 06:55:58,485",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x7417952e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei"
              },
              {
                "name": "DllBase",
                "value": "0x73db0000"
              }
            ],
            "repeated": 0,
            "id": 55
          },
          {
            "timestamp": "2026-04-25 06:55:58,672",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73db89ae",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "api-ms-win-core-synch-l1-2-0"
              },
              {
                "name": "BaseAddress",
                "value": "0x77150000"
              }
            ],
            "repeated": 0,
            "id": 56
          },
          {
            "timestamp": "2026-04-25 06:55:58,672",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73db89ae",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "api-ms-win-core-fibers-l1-1-1"
              },
              {
                "name": "BaseAddress",
                "value": "0x77150000"
              }
            ],
            "repeated": 0,
            "id": 57
          },
          {
            "timestamp": "2026-04-25 06:55:58,672",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73db8760",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "api-ms-win-core-synch-l1-2-0"
              },
              {
                "name": "BaseAddress",
                "value": "0x77150000"
              }
            ],
            "repeated": 0,
            "id": 58
          },
          {
            "timestamp": "2026-04-25 06:55:58,672",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73db8760",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "api-ms-win-core-fibers-l1-1-1"
              },
              {
                "name": "BaseAddress",
                "value": "0x77150000"
              }
            ],
            "repeated": 0,
            "id": 59
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73db8760",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "api-ms-win-core-localization-l1-2-1"
              },
              {
                "name": "BaseAddress",
                "value": "0x77150000"
              }
            ],
            "repeated": 0,
            "id": 60
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x77266176",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 61
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x7417952e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x73db0000"
              }
            ],
            "repeated": 0,
            "id": 62
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x7417952e",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x73db0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 63
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterShimImplCallback"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73db14d0"
              }
            ],
            "repeated": 0,
            "id": 64
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterShimImplCleanupCallback"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 65
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "SetShellShimInstance"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 66
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "OnShimDllMainCalled"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73db9630"
              }
            ],
            "repeated": 0,
            "id": 67
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "_CorExeMain_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 68
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "_CorExeMain"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73dbfa20"
              }
            ],
            "repeated": 0,
            "id": 69
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77264429",
            "parentcaller": "0x73dc2143",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\MSCOREE.DLL.local"
              }
            ],
            "repeated": 0,
            "id": 70
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73db8d85",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000238"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 71
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x73db8da2",
            "parentcaller": "0x73db924a",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 72
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x73db8de3",
            "parentcaller": "0x73db924a",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "Data",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 73
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x73db8df4",
            "parentcaller": "0x73db924a",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              }
            ],
            "repeated": 0,
            "id": 74
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x73db162d",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c3e4b0",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\*"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0xc87fbef5"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01d5acde"
              }
            ],
            "repeated": 0,
            "id": 75
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 76
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 77
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 78
          },
          {
            "timestamp": "2026-04-25 06:55:58,735",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 79
          },
          {
            "timestamp": "2026-04-25 06:55:58,876",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 80
          },
          {
            "timestamp": "2026-04-25 06:55:58,891",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000022c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 81
          },
          {
            "timestamp": "2026-04-25 06:55:58,891",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73db7007",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000022c"
              }
            ],
            "repeated": 0,
            "id": 82
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000022c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 83
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73db7007",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000022c"
              }
            ],
            "repeated": 0,
            "id": 84
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x73db5ff0",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000238"
              }
            ],
            "repeated": 0,
            "id": 85
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73dc1a39",
            "parentcaller": "0x73db6701",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 86
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73dc1a7f",
            "parentcaller": "0x73db6701",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x0000022c"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 87
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 88
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x77266176",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "SHLWAPI.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76f20000"
              }
            ],
            "repeated": 0,
            "id": 89
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "SHLWAPI.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76f20000"
              },
              {
                "name": "FunctionName",
                "value": "UrlIsW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76f343a0"
              }
            ],
            "repeated": 0,
            "id": 90
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 91
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 92
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73dc0224",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 93
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73dc024d",
            "parentcaller": "0x73dc0350",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "ValueName",
                "value": "UseLegacyV2RuntimeActivationPolicyDefaultValue"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\UseLegacyV2RuntimeActivationPolicyDefaultValue"
              }
            ],
            "repeated": 0,
            "id": 94
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73db760b",
            "parentcaller": "0x73dc02b6",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 95
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73dc0224",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 96
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73dc024d",
            "parentcaller": "0x73dc0350",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "ValueName",
                "value": "OnlyUseLatestCLR"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\OnlyUseLatestCLR"
              }
            ],
            "repeated": 0,
            "id": 97
          },
          {
            "timestamp": "2026-04-25 06:55:58,985",
            "thread_id": "6504",
            "caller": "0x73db760b",
            "parentcaller": "0x73dc02b6",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 98
          },
          {
            "timestamp": "2026-04-25 06:55:59,047",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000228"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 99
          },
          {
            "timestamp": "2026-04-25 06:55:59,047",
            "thread_id": "6504",
            "caller": "0x7727081d",
            "parentcaller": "0x73de4737",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000228"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x000\\x03\\x00\\x00\\x00\\x00\\x00\\x00*\\x03\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 100
          },
          {
            "timestamp": "2026-04-25 06:55:59,047",
            "thread_id": "6504",
            "caller": "0x77260e58",
            "parentcaller": "0x77260abe",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000220"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000228"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 101
          },
          {
            "timestamp": "2026-04-25 06:55:59,047",
            "thread_id": "6504",
            "caller": "0x7726f16b",
            "parentcaller": "0x73de3dc6",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000220"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02850000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095ef3c"
              },
              {
                "name": "ViewSize",
                "value": "0x00033000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 102
          },
          {
            "timestamp": "2026-04-25 06:55:59,251",
            "thread_id": "6504",
            "caller": "0x73df863e",
            "parentcaller": "0x73df740f",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 103
          },
          {
            "timestamp": "2026-04-25 06:55:59,251",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73de3e96",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 104
          },
          {
            "timestamp": "2026-04-25 06:55:59,251",
            "thread_id": "6504",
            "caller": "0x77270c75",
            "parentcaller": "0x73de3ec1",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02850000"
              },
              {
                "name": "RegionSize",
                "value": "0x00033000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 105
          },
          {
            "timestamp": "2026-04-25 06:55:59,251",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73de3ee4",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000220"
              }
            ],
            "repeated": 0,
            "id": 106
          },
          {
            "timestamp": "2026-04-25 06:55:59,251",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000220"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 107
          },
          {
            "timestamp": "2026-04-25 06:55:59,251",
            "thread_id": "6504",
            "caller": "0x7727081d",
            "parentcaller": "0x73de4737",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000220"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x000\\x03\\x00\\x00\\x00\\x00\\x00\\x00*\\x03\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 108
          },
          {
            "timestamp": "2026-04-25 06:55:59,251",
            "thread_id": "6504",
            "caller": "0x77260e58",
            "parentcaller": "0x77260abe",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000228"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000220"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 109
          },
          {
            "timestamp": "2026-04-25 06:55:59,266",
            "thread_id": "6504",
            "caller": "0x7726f16b",
            "parentcaller": "0x73de3dc6",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000228"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02850000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095ef3c"
              },
              {
                "name": "ViewSize",
                "value": "0x00033000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 110
          },
          {
            "timestamp": "2026-04-25 06:55:59,266",
            "thread_id": "6504",
            "caller": "0x73df863e",
            "parentcaller": "0x73df740f",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 111
          },
          {
            "timestamp": "2026-04-25 06:55:59,266",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73de3e96",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000220"
              }
            ],
            "repeated": 0,
            "id": 112
          },
          {
            "timestamp": "2026-04-25 06:55:59,266",
            "thread_id": "6504",
            "caller": "0x77270c75",
            "parentcaller": "0x73de3ec1",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02850000"
              },
              {
                "name": "RegionSize",
                "value": "0x00033000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 113
          },
          {
            "timestamp": "2026-04-25 06:55:59,266",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73de3ee4",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 114
          },
          {
            "timestamp": "2026-04-25 06:55:59,376",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73dcfc7b",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000006",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000000"
              },
              {
                "name": "SubKey",
                "value": "Policy\\Standards"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "Policy\\Standards"
              }
            ],
            "repeated": 0,
            "id": 115
          },
          {
            "timestamp": "2026-04-25 06:55:59,376",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73dcfc7b",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x0000022c"
              },
              {
                "name": "SubKey",
                "value": "Policy\\Standards"
              },
              {
                "name": "Handle",
                "value": "0x00000220"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Policy\\Standards"
              }
            ],
            "repeated": 0,
            "id": 116
          },
          {
            "timestamp": "2026-04-25 06:55:59,376",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73dcfa9a",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000220"
              },
              {
                "name": "SubKey",
                "value": "v2.0.50727"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\standards\\v2.0.50727"
              }
            ],
            "repeated": 0,
            "id": 117
          },
          {
            "timestamp": "2026-04-25 06:55:59,376",
            "thread_id": "6504",
            "caller": "0x73dc509d",
            "parentcaller": "0x73dc98ef",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000220"
              }
            ],
            "repeated": 0,
            "id": 118
          },
          {
            "timestamp": "2026-04-25 06:55:59,376",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbdd47",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\kernel.appcore"
              },
              {
                "name": "DllBase",
                "value": "0x75250000"
              }
            ],
            "repeated": 0,
            "id": 119
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbdd47",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "api-ms-win-appmodel-runtime-l1-1-2.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x75250000"
              }
            ],
            "repeated": 0,
            "id": 120
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbdd47",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x75250000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "api-ms-win-appmodel-runtime-l1-1-2.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000800"
              }
            ],
            "repeated": 0,
            "id": 121
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "kernel.appcore.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75250000"
              },
              {
                "name": "FunctionName",
                "value": "AppPolicyGetClrCompat"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75253a00"
              }
            ],
            "repeated": 0,
            "id": 122
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "kernel.appcore.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75250000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentPackageId"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75253d80"
              }
            ],
            "repeated": 0,
            "id": 123
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "kernel.appcore.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75250000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentPackageInfo"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75253db0"
              }
            ],
            "repeated": 0,
            "id": 124
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "kernel.appcore.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75250000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentPackagePath"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75253dd0"
              }
            ],
            "repeated": 0,
            "id": 125
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77260848",
            "parentcaller": "0x73dbdb51",
            "category": "process",
            "api": "NtOpenProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0x00000220"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000400",
                "pretty_value": "PROCESS_QUERY_INFORMATION"
              },
              {
                "name": "ProcessIdentifier",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 126
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 127
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessToken"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebea30"
              }
            ],
            "repeated": 0,
            "id": 128
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 129
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77263cc4",
            "parentcaller": "0x73dbdbb9",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0x00000220"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000008"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 130
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 131
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetTokenInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe690"
              }
            ],
            "repeated": 0,
            "id": 132
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 133
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77261446",
            "parentcaller": "0x73dbdc0a",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "29"
              },
              {
                "name": "TokenInformation",
                "value": "\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 134
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73dbdc40",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 135
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73dbdc62",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000220"
              }
            ],
            "repeated": 0,
            "id": 136
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73db7f73",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Microsoft\\Fusion"
              },
              {
                "name": "Handle",
                "value": "0x00000220"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion"
              }
            ],
            "repeated": 0,
            "id": 137
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x73db7fa5",
            "parentcaller": "0x73db8014",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000220"
              },
              {
                "name": "ValueName",
                "value": "NoClientChecks"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Fusion\\NoClientChecks"
              }
            ],
            "repeated": 0,
            "id": 138
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x73db7fd5",
            "parentcaller": "0x73db8014",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000220"
              }
            ],
            "repeated": 0,
            "id": 139
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 140
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x77266176",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\VERSION"
              },
              {
                "name": "DllBase",
                "value": "0x75460000"
              }
            ],
            "repeated": 0,
            "id": 141
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x77266176",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "VERSION.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x75460000"
              }
            ],
            "repeated": 0,
            "id": 142
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "VERSION.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75460000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileVersionInfoSizeW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x754615c0"
              }
            ],
            "repeated": 0,
            "id": 143
          },
          {
            "timestamp": "2026-04-25 06:55:59,391",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 144
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x73dc080a",
            "parentcaller": "0x73dbda39",
            "category": "filesystem",
            "api": "GetFileVersionInfoSizeW",
            "status": true,
            "return": "0x0000081c",
            "arguments": [
              {
                "name": "PathName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 145
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 146
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "VERSION.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75460000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileVersionInfoW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x754615e0"
              }
            ],
            "repeated": 0,
            "id": 147
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 148
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x73dc082b",
            "parentcaller": "0x73dbda39",
            "category": "filesystem",
            "api": "GetFileVersionInfoW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "PathName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 149
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 150
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "VERSION.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75460000"
              },
              {
                "name": "FunctionName",
                "value": "VerQueryValueW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75461560"
              }
            ],
            "repeated": 0,
            "id": 151
          },
          {
            "timestamp": "2026-04-25 06:56:02,563",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 152
          },
          {
            "timestamp": "2026-04-25 06:56:02,610",
            "thread_id": "6504",
            "caller": "0x73dbd044",
            "parentcaller": "0x73dbcfd3",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000022c"
              }
            ],
            "repeated": 0,
            "id": 153
          },
          {
            "timestamp": "2026-04-25 06:56:02,610",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000022c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00120080",
                "pretty_value": "FILE_READ_ATTRIBUTES|READ_CONTROL|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 154
          },
          {
            "timestamp": "2026-04-25 06:56:02,610",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73db7007",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000022c"
              }
            ],
            "repeated": 0,
            "id": 155
          },
          {
            "timestamp": "2026-04-25 06:56:02,610",
            "thread_id": "6504",
            "caller": "0x73db1e78",
            "parentcaller": "0x73dbd114",
            "category": "misc",
            "api": "HeapCreate",
            "status": true,
            "return": "0x04fe0000",
            "arguments": [
              {
                "name": "Options",
                "value": "262144"
              },
              {
                "name": "InitialSize",
                "value": "0x00000000"
              },
              {
                "name": "MaximumSize",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 156
          },
          {
            "timestamp": "2026-04-25 06:56:03,547",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbfecf",
            "category": "__notification__",
            "api": "sysenter",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadIdentifier",
                "value": "6504"
              },
              {
                "name": "Module",
                "value": "KERNEL32.dll"
              },
              {
                "name": "Return Address",
                "value": "0x76ad24ac"
              }
            ],
            "repeated": 0,
            "id": 157
          },
          {
            "timestamp": "2026-04-25 06:56:04,282",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbfecf",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\\MSVCR80"
              },
              {
                "name": "DllBase",
                "value": "0x736e0000"
              }
            ],
            "repeated": 0,
            "id": 158
          },
          {
            "timestamp": "2026-04-25 06:56:04,282",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbfecf",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks"
              },
              {
                "name": "DllBase",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 159
          },
          {
            "timestamp": "2026-04-25 06:56:04,751",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c50000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 160
          },
          {
            "timestamp": "2026-04-25 06:56:04,751",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050c1000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 161
          },
          {
            "timestamp": "2026-04-25 06:56:04,797",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050c2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 162
          },
          {
            "timestamp": "2026-04-25 06:56:04,907",
            "thread_id": "6504",
            "caller": "0x7373339d",
            "parentcaller": "0x736e1762",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 163
          },
          {
            "timestamp": "2026-04-25 06:56:04,922",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x736e1da6",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 164
          },
          {
            "timestamp": "2026-04-25 06:56:04,922",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FindActCtxSectionStringW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac8900"
              }
            ],
            "repeated": 0,
            "id": 165
          },
          {
            "timestamp": "2026-04-25 06:56:04,922",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x736e1dcd",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "MSCoree.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 166
          },
          {
            "timestamp": "2026-04-25 06:56:04,922",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x736e1dd6",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "PGORT80.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 167
          },
          {
            "timestamp": "2026-04-25 06:56:04,922",
            "thread_id": "6504",
            "caller": "0x77262ba1",
            "parentcaller": "0x76ace2b9",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "12"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x00\\x80\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 168
          },
          {
            "timestamp": "2026-04-25 06:56:04,922",
            "thread_id": "6504",
            "caller": "0x77264429",
            "parentcaller": "0x76ace2c9",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\\msvcr80.dll"
              }
            ],
            "repeated": 0,
            "id": 169
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c3e4b0",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0x3a6eea36"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01ca0431"
              }
            ],
            "repeated": 0,
            "id": 170
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000244"
              }
            ],
            "repeated": 0,
            "id": 171
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c3e4b0",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\WinSxS"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0x3a6eea36"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01d5acdd"
              }
            ],
            "repeated": 0,
            "id": 172
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000244"
              }
            ],
            "repeated": 0,
            "id": 173
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c3e7b0",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\\msvcr80.dll"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0xf1cf05b4"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01d5acdd"
              }
            ],
            "repeated": 0,
            "id": 174
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000244"
              }
            ],
            "repeated": 0,
            "id": 175
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x77262ba1",
            "parentcaller": "0x76ace569",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "12"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 176
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x736e1f08",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 177
          },
          {
            "timestamp": "2026-04-25 06:56:05,063",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetSystemWindowsDirectoryW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac9500"
              }
            ],
            "repeated": 0,
            "id": 178
          },
          {
            "timestamp": "2026-04-25 06:56:05,579",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x73836231",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscoree.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 179
          },
          {
            "timestamp": "2026-04-25 06:56:05,579",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcessExecutableHeap"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x74171fa0"
              }
            ],
            "repeated": 0,
            "id": 180
          },
          {
            "timestamp": "2026-04-25 06:56:05,579",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcessExecutableHeap_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 181
          },
          {
            "timestamp": "2026-04-25 06:56:05,579",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcessExecutableHeap"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73db1e60"
              }
            ],
            "repeated": 0,
            "id": 182
          },
          {
            "timestamp": "2026-04-25 06:56:06,376",
            "thread_id": "6504",
            "caller": "0x77e7007d",
            "parentcaller": "0x7726648d",
            "category": "system",
            "api": "NtQueryLicenseValue",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Name",
                "value": "TerminalServices-RemoteConnectionManager-AllowAppServerMode"
              },
              {
                "name": "Type",
                "value": "0x00000004"
              }
            ],
            "repeated": 0,
            "id": 183
          },
          {
            "timestamp": "2026-04-25 06:56:06,766",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7383032d",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 184
          },
          {
            "timestamp": "2026-04-25 06:56:06,766",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73830395",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 185
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738303bc",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "ValueName",
                "value": "GCStressStart"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStart"
              }
            ],
            "repeated": 0,
            "id": 186
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x738303cc",
            "parentcaller": "0x738b76dd",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              }
            ],
            "repeated": 0,
            "id": 187
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7383032d",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 188
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73830395",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 189
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738303bc",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "ValueName",
                "value": "GCStressStartAtJit"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStartAtJit"
              }
            ],
            "repeated": 0,
            "id": 190
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x738303cc",
            "parentcaller": "0x738b76dd",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              }
            ],
            "repeated": 0,
            "id": 191
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7383032d",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 192
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73830395",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 193
          },
          {
            "timestamp": "2026-04-25 06:56:06,860",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738303bc",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "ValueName",
                "value": "GCStressStart"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStart"
              }
            ],
            "repeated": 0,
            "id": 194
          },
          {
            "timestamp": "2026-04-25 06:56:06,876",
            "thread_id": "6504",
            "caller": "0x738303cc",
            "parentcaller": "0x738b76dd",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              }
            ],
            "repeated": 0,
            "id": 195
          },
          {
            "timestamp": "2026-04-25 06:56:06,876",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7383032d",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 196
          },
          {
            "timestamp": "2026-04-25 06:56:06,876",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73830395",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 197
          },
          {
            "timestamp": "2026-04-25 06:56:06,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738303bc",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "ValueName",
                "value": "GCStressStartAtJit"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStartAtJit"
              }
            ],
            "repeated": 0,
            "id": 198
          },
          {
            "timestamp": "2026-04-25 06:56:06,876",
            "thread_id": "6504",
            "caller": "0x738303cc",
            "parentcaller": "0x738b76dd",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              }
            ],
            "repeated": 0,
            "id": 199
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbfecf",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 200
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x73dbfecf",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x73780000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 201
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              },
              {
                "name": "FunctionName",
                "value": "SetLoadedByMscoree"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 202
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 203
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x77266176",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "USER32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x75d10000"
              }
            ],
            "repeated": 0,
            "id": 204
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcessWindowStation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d517d0"
              }
            ],
            "repeated": 0,
            "id": 205
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 206
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 207
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetUserObjectInformationW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d518c0"
              }
            ],
            "repeated": 0,
            "id": 208
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x73dbce46",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 209
          },
          {
            "timestamp": "2026-04-25 06:56:07,079",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              },
              {
                "name": "FunctionName",
                "value": "_CorExeMain"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x738b877c"
              }
            ],
            "repeated": 0,
            "id": 210
          },
          {
            "timestamp": "2026-04-25 06:56:07,188",
            "thread_id": "6504",
            "caller": "0x738d8391",
            "parentcaller": "0x738d83dd",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 211
          },
          {
            "timestamp": "2026-04-25 06:56:07,235",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x73835854",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscorwks.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 212
          },
          {
            "timestamp": "2026-04-25 06:56:07,235",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              },
              {
                "name": "FunctionName",
                "value": "GetCLRFunction"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x738708a5"
              }
            ],
            "repeated": 0,
            "id": 213
          },
          {
            "timestamp": "2026-04-25 06:56:07,360",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7383032d",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 214
          },
          {
            "timestamp": "2026-04-25 06:56:07,376",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73830395",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 215
          },
          {
            "timestamp": "2026-04-25 06:56:07,376",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738303bc",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "ValueName",
                "value": "DisableConfigCache"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DisableConfigCache"
              }
            ],
            "repeated": 0,
            "id": 216
          },
          {
            "timestamp": "2026-04-25 06:56:07,376",
            "thread_id": "6504",
            "caller": "0x738303cc",
            "parentcaller": "0x738355f2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              }
            ],
            "repeated": 0,
            "id": 217
          },
          {
            "timestamp": "2026-04-25 06:56:07,376",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73835620",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 218
          },
          {
            "timestamp": "2026-04-25 06:56:07,376",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73835620",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 219
          },
          {
            "timestamp": "2026-04-25 06:56:07,376",
            "thread_id": "6504",
            "caller": "0x73862bb6",
            "parentcaller": "0x7383565b",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "ValueName",
                "value": "InstallRoot"
              },
              {
                "name": "Type",
                "value": "1",
                "pretty_value": "REG_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot"
              }
            ],
            "repeated": 0,
            "id": 220
          },
          {
            "timestamp": "2026-04-25 06:56:07,516",
            "thread_id": "6504",
            "caller": "0x73862bb6",
            "parentcaller": "0x7383565b",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000248"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "Type",
                "value": "0",
                "pretty_value": "REG_NONE"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\"
              }
            ],
            "repeated": 0,
            "id": 221
          },
          {
            "timestamp": "2026-04-25 06:56:07,641",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x739b92bb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "advapi32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 222
          },
          {
            "timestamp": "2026-04-25 06:56:07,641",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterTraceGuidsW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ea44b0"
              }
            ],
            "repeated": 0,
            "id": 223
          },
          {
            "timestamp": "2026-04-25 06:56:07,641",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "UnregisterTraceGuids"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e99a70"
              }
            ],
            "repeated": 0,
            "id": 224
          },
          {
            "timestamp": "2026-04-25 06:56:07,641",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetTraceLoggerHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eac810"
              }
            ],
            "repeated": 0,
            "id": 225
          },
          {
            "timestamp": "2026-04-25 06:56:07,641",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetTraceEnableLevel"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eac860"
              }
            ],
            "repeated": 0,
            "id": 226
          },
          {
            "timestamp": "2026-04-25 06:56:07,641",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetTraceEnableFlags"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eac890"
              }
            ],
            "repeated": 0,
            "id": 227
          },
          {
            "timestamp": "2026-04-25 06:56:07,641",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "TraceEvent"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77f41320"
              }
            ],
            "repeated": 0,
            "id": 228
          },
          {
            "timestamp": "2026-04-25 06:56:08,251",
            "thread_id": "6504",
            "caller": "0x77e7007d",
            "parentcaller": "0x7726648d",
            "category": "system",
            "api": "NtQueryLicenseValue",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Name",
                "value": "TerminalServices-RemoteConnectionManager-AllowAppServerMode"
              },
              {
                "name": "Type",
                "value": "0x00000004"
              }
            ],
            "repeated": 0,
            "id": 229
          },
          {
            "timestamp": "2026-04-25 06:56:08,376",
            "thread_id": "6504",
            "caller": "0x77260c1f",
            "parentcaller": "0x7382c16d",
            "category": "synchronization",
            "api": "NtOpenEvent",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "EventName",
                "value": "Global\\CLR_PerfMon_StartEnumEvent"
              }
            ],
            "repeated": 0,
            "id": 230
          },
          {
            "timestamp": "2026-04-25 06:56:08,704",
            "thread_id": "6504",
            "caller": "0x73732866",
            "parentcaller": "0x738353e7",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 231
          },
          {
            "timestamp": "2026-04-25 06:56:09,016",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "mscoree.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 232
          },
          {
            "timestamp": "2026-04-25 06:56:09,016",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x74160000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "mscoree.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 233
          },
          {
            "timestamp": "2026-04-25 06:56:09,016",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "IEE"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x74172e40"
              }
            ],
            "repeated": 0,
            "id": 234
          },
          {
            "timestamp": "2026-04-25 06:56:09,016",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "IEE_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 235
          },
          {
            "timestamp": "2026-04-25 06:56:09,016",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "IEE"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73de0c70"
              }
            ],
            "repeated": 0,
            "id": 236
          },
          {
            "timestamp": "2026-04-25 06:56:09,047",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              },
              {
                "name": "FunctionName",
                "value": "IEE"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x738354a8"
              }
            ],
            "repeated": 0,
            "id": 237
          },
          {
            "timestamp": "2026-04-25 06:56:09,047",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x737ff357",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73782000"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000020",
                "pretty_value": "PAGE_EXECUTE_READ"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 238
          },
          {
            "timestamp": "2026-04-25 06:56:09,047",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x737ff357",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73782000"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000020",
                "pretty_value": "PAGE_EXECUTE_READ"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 239
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x73834c46",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscoree.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 240
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "GetStartupFlags"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7416ffc0"
              }
            ],
            "repeated": 0,
            "id": 241
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetStartupFlags_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 242
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetStartupFlags"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73ddf5a0"
              }
            ],
            "repeated": 0,
            "id": 243
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "GetHostConfigurationFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x74172050"
              }
            ],
            "repeated": 0,
            "id": 244
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetHostConfigurationFile_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 245
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetHostConfigurationFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73ddf600"
              }
            ],
            "repeated": 0,
            "id": 246
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCORVersion_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 247
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCORVersion"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73dde060"
              }
            ],
            "repeated": 0,
            "id": 248
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x73834634",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscoree.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 249
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "GetCORSystemDirectory"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x741708b0"
              }
            ],
            "repeated": 0,
            "id": 250
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCORSystemDirectory_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73ddf300"
              }
            ],
            "repeated": 0,
            "id": 251
          },
          {
            "timestamp": "2026-04-25 06:56:09,251",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73df23f8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework\\Policy\\AppPatch"
              },
              {
                "name": "Handle",
                "value": "0x00000220"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Policy\\AppPatch"
              }
            ],
            "repeated": 0,
            "id": 252
          },
          {
            "timestamp": "2026-04-25 06:56:09,313",
            "thread_id": "6504",
            "caller": "0x77277bae",
            "parentcaller": "0x73df2c0b",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319"
              }
            ],
            "repeated": 0,
            "id": 253
          },
          {
            "timestamp": "2026-04-25 06:56:09,313",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73df23f8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000220"
              },
              {
                "name": "SubKey",
                "value": "v4.0.30319.00000"
              },
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000"
              }
            ],
            "repeated": 0,
            "id": 254
          },
          {
            "timestamp": "2026-04-25 06:56:09,313",
            "thread_id": "6504",
            "caller": "0x73db760b",
            "parentcaller": "0x73df0f0e",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000220"
              }
            ],
            "repeated": 0,
            "id": 255
          },
          {
            "timestamp": "2026-04-25 06:56:09,313",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73df23f8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000228"
              },
              {
                "name": "SubKey",
                "value": "mscorwks.dll"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000\\mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 256
          },
          {
            "timestamp": "2026-04-25 06:56:09,313",
            "thread_id": "6504",
            "caller": "0x73db760b",
            "parentcaller": "0x73df0b0a",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 257
          },
          {
            "timestamp": "2026-04-25 06:56:09,376",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateConfigStream_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 258
          },
          {
            "timestamp": "2026-04-25 06:56:09,376",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateConfigStream"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73db96a0"
              }
            ],
            "repeated": 0,
            "id": 259
          },
          {
            "timestamp": "2026-04-25 06:56:09,485",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000228"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 260
          },
          {
            "timestamp": "2026-04-25 06:56:09,594",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c51000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 261
          },
          {
            "timestamp": "2026-04-25 06:56:09,704",
            "thread_id": "6504",
            "caller": "0x7726249c",
            "parentcaller": "0x73db1df9",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000228"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "<?xml version=\"1.0\" encoding=\"UTF-8\"?><!--\r\n    Please refer to machine.config.comments for a description and\r\n    the default values of each configuration section.\r\n\r\n    For a full documentation of the schema please refer to\r\n    http://go.microsoft.com/"
              },
              {
                "name": "Length",
                "value": "4095"
              }
            ],
            "repeated": 0,
            "id": 262
          },
          {
            "timestamp": "2026-04-25 06:56:09,719",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c54000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 263
          },
          {
            "timestamp": "2026-04-25 06:56:09,782",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c55000"
              },
              {
                "name": "RegionSize",
                "value": "0x00005000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 264
          },
          {
            "timestamp": "2026-04-25 06:56:09,797",
            "thread_id": "6504",
            "caller": "0x7726249c",
            "parentcaller": "0x73db1df9",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000228"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "7a5c561934e089\">\r\n            <section name=\"schemaImporterExtensions\" type=\"System.Xml.Serialization.Configuration.SchemaImporterExtensionsSection, System.Xml, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\"/>\r\n            <section name"
              },
              {
                "name": "Length",
                "value": "18712"
              }
            ],
            "repeated": 0,
            "id": 265
          },
          {
            "timestamp": "2026-04-25 06:56:09,844",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73dc00b5",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 266
          },
          {
            "timestamp": "2026-04-25 06:56:09,844",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 267
          },
          {
            "timestamp": "2026-04-25 06:56:09,844",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ntdll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 268
          },
          {
            "timestamp": "2026-04-25 06:56:09,844",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x77e40000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "ntdll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 269
          },
          {
            "timestamp": "2026-04-25 06:56:09,844",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlUnwind"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ea8f40"
              }
            ],
            "repeated": 0,
            "id": 270
          },
          {
            "timestamp": "2026-04-25 06:56:09,844",
            "thread_id": "6504",
            "caller": "0x77e7007d",
            "parentcaller": "0x7726648d",
            "category": "system",
            "api": "NtQueryLicenseValue",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Name",
                "value": "TerminalServices-RemoteConnectionManager-AllowAppServerMode"
              },
              {
                "name": "Type",
                "value": "0x00000004"
              }
            ],
            "repeated": 0,
            "id": 271
          },
          {
            "timestamp": "2026-04-25 06:56:09,891",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x7383341a",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 272
          },
          {
            "timestamp": "2026-04-25 06:56:09,891",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "IsWow64Process"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad06e0"
              }
            ],
            "repeated": 0,
            "id": 273
          },
          {
            "timestamp": "2026-04-25 06:56:10,126",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion"
              },
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion"
              }
            ],
            "repeated": 0,
            "id": 274
          },
          {
            "timestamp": "2026-04-25 06:56:10,188",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 275
          },
          {
            "timestamp": "2026-04-25 06:56:10,329",
            "thread_id": "6504",
            "caller": "0x77264429",
            "parentcaller": "0x737ddb34",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\fusion.localgac"
              }
            ],
            "repeated": 0,
            "id": 276
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion"
              },
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion"
              }
            ],
            "repeated": 0,
            "id": 277
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x73aeb62d",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "ValueName",
                "value": "CacheLocation"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\CacheLocation"
              }
            ],
            "repeated": 0,
            "id": 278
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x73aeb671",
            "parentcaller": "0x73aeb6fd",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 279
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x73b13ef5",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 280
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetSystemWindowsDirectoryW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac9500"
              }
            ],
            "repeated": 0,
            "id": 281
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion"
              },
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion"
              }
            ],
            "repeated": 0,
            "id": 282
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x73833263",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              },
              {
                "name": "ValueName",
                "value": "DownloadCacheQuotaInKB"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DownloadCacheQuotaInKB"
              }
            ],
            "repeated": 0,
            "id": 283
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\Fusion"
              }
            ],
            "repeated": 0,
            "id": 284
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x738332b7",
            "parentcaller": "0x73832966",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 285
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "EnableLog"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\EnableLog"
              }
            ],
            "repeated": 0,
            "id": 286
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "LoggingLevel"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LoggingLevel"
              }
            ],
            "repeated": 0,
            "id": 287
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "ForceLog"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\ForceLog"
              }
            ],
            "repeated": 0,
            "id": 288
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "LogFailures"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogFailures"
              }
            ],
            "repeated": 0,
            "id": 289
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "VersioningLog"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\VersioningLog"
              }
            ],
            "repeated": 0,
            "id": 290
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "LogResourceBinds"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogResourceBinds"
              }
            ],
            "repeated": 0,
            "id": 291
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "UseLegacyIdentityFormat"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\UseLegacyIdentityFormat"
              }
            ],
            "repeated": 0,
            "id": 292
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "DisableMSIPeek"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DisableMSIPeek"
              }
            ],
            "repeated": 0,
            "id": 293
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "NoClientChecks"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NoClientChecks"
              }
            ],
            "repeated": 0,
            "id": 294
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x73832a56",
            "parentcaller": "0x7383059b",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              }
            ],
            "repeated": 0,
            "id": 295
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options"
              },
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options"
              }
            ],
            "repeated": 0,
            "id": 296
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x738331c0",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "ValueName",
                "value": "DevOverrideEnable"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\DevOverrideEnable"
              }
            ],
            "repeated": 0,
            "id": 297
          },
          {
            "timestamp": "2026-04-25 06:56:10,454",
            "thread_id": "6504",
            "caller": "0x73a43b8f",
            "parentcaller": "0x73a4415a",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              }
            ],
            "repeated": 0,
            "id": 298
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x7382c23b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "advapi32"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 299
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "AllocateAndInitializeSid"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf090"
              }
            ],
            "repeated": 0,
            "id": 300
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x77260848",
            "parentcaller": "0x73830e3c",
            "category": "process",
            "api": "NtOpenProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0x0000024c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000400",
                "pretty_value": "PROCESS_QUERY_INFORMATION"
              },
              {
                "name": "ProcessIdentifier",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 301
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessToken"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebea30"
              }
            ],
            "repeated": 0,
            "id": 302
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x77263cc4",
            "parentcaller": "0x73830e70",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0x0000024c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000008"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 303
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetTokenInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe690"
              }
            ],
            "repeated": 0,
            "id": 304
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x77261446",
            "parentcaller": "0x73830e9b",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": false,
            "return": "0xffffffffc0000023",
            "pretty_return": "BUFFER_TOO_SMALL",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "4"
              },
              {
                "name": "TokenInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 305
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x77261446",
            "parentcaller": "0x73830ec5",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "4"
              },
              {
                "name": "TokenInformation",
                "value": "|\\x15\\xc5\\x00\\x01\\x02\\x00\\x00\\x00\\x00\\x00\\x05 \\x00\\x00\\x00 \\x02\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 306
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73830edd",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              }
            ],
            "repeated": 0,
            "id": 307
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73830ef0",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000228"
              }
            ],
            "repeated": 0,
            "id": 308
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "InitializeAcl"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf2d0"
              }
            ],
            "repeated": 0,
            "id": 309
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "AddAccessAllowedAce"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf170"
              }
            ],
            "repeated": 0,
            "id": 310
          },
          {
            "timestamp": "2026-04-25 06:56:10,532",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "FreeSid"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebfc70"
              }
            ],
            "repeated": 0,
            "id": 311
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x77260e58",
            "parentcaller": "0x77260abe",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000250"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0007",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_WRITE"
              },
              {
                "name": "ObjectAttributes",
                "value": "Global\\Cor_Private_IPCBlock_6484"
              },
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 312
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726f16b",
            "parentcaller": "0x738321f3",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000250"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02850000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095f3e0"
              },
              {
                "name": "ViewSize",
                "value": "0x00001000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 313
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x7382c23b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "advapi32"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 314
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "AllocateAndInitializeSid"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf090"
              }
            ],
            "repeated": 0,
            "id": 315
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x77260848",
            "parentcaller": "0x73830e3c",
            "category": "process",
            "api": "NtOpenProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0x00000254"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000400",
                "pretty_value": "PROCESS_QUERY_INFORMATION"
              },
              {
                "name": "ProcessIdentifier",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 316
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessToken"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebea30"
              }
            ],
            "repeated": 0,
            "id": 317
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x77263cc4",
            "parentcaller": "0x73830e70",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0x00000254"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000008"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000258"
              }
            ],
            "repeated": 0,
            "id": 318
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetTokenInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe690"
              }
            ],
            "repeated": 0,
            "id": 319
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x77261446",
            "parentcaller": "0x73830e9b",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": false,
            "return": "0xffffffffc0000023",
            "pretty_return": "BUFFER_TOO_SMALL",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "4"
              },
              {
                "name": "TokenInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 320
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x77261446",
            "parentcaller": "0x73830ec5",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "4"
              },
              {
                "name": "TokenInformation",
                "value": "\\xbc\\x14\\xc5\\x00\\x01\\x02\\x00\\x00\\x00\\x00\\x00\\x05 \\x00\\x00\\x00 \\x02\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 321
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73830edd",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000254"
              }
            ],
            "repeated": 0,
            "id": 322
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73830ef0",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000258"
              }
            ],
            "repeated": 0,
            "id": 323
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "InitializeAcl"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf2d0"
              }
            ],
            "repeated": 0,
            "id": 324
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "AddAccessAllowedAce"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf170"
              }
            ],
            "repeated": 0,
            "id": 325
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "FreeSid"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebfc70"
              }
            ],
            "repeated": 0,
            "id": 326
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x77260e58",
            "parentcaller": "0x77260abe",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000258"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0007",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_WRITE"
              },
              {
                "name": "ObjectAttributes",
                "value": "Global\\Cor_Public_IPCBlock_6484"
              },
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 327
          },
          {
            "timestamp": "2026-04-25 06:56:10,547",
            "thread_id": "6504",
            "caller": "0x7726f16b",
            "parentcaller": "0x738322ec",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000258"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02860000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095f400"
              },
              {
                "name": "ViewSize",
                "value": "0x00001000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 328
          },
          {
            "timestamp": "2026-04-25 06:56:10,610",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02870000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 329
          },
          {
            "timestamp": "2026-04-25 06:56:10,610",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02870000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 330
          },
          {
            "timestamp": "2026-04-25 06:56:10,626",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x7380cc0a",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 331
          },
          {
            "timestamp": "2026-04-25 06:56:10,626",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetThreadStackGuarantee"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad1f20"
              }
            ],
            "repeated": 0,
            "id": 332
          },
          {
            "timestamp": "2026-04-25 06:56:10,626",
            "thread_id": "6504",
            "caller": "0x7380aa35",
            "parentcaller": "0x738300a6",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 333
          },
          {
            "timestamp": "2026-04-25 06:56:10,626",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 334
          },
          {
            "timestamp": "2026-04-25 06:56:10,626",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x73b187d1",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework\\NGen\\Policy\\v2.0"
              },
              {
                "name": "Handle",
                "value": "0x00000268"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\NGen\\Policy\\v2.0"
              }
            ],
            "repeated": 0,
            "id": 335
          },
          {
            "timestamp": "2026-04-25 06:56:10,626",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x73b1880d",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000268"
              },
              {
                "name": "ValueName",
                "value": "OptimizeUsedBinaries"
              },
              {
                "name": "Data",
                "value": "1"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\NGen\\Policy\\v2.0\\OptimizeUsedBinaries"
              }
            ],
            "repeated": 0,
            "id": 336
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x73852cae",
            "parentcaller": "0x73827206",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000268"
              }
            ],
            "repeated": 0,
            "id": 337
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\91d880890f6e481edcbe.exe.log"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 338
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 339
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x7383378f",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 340
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FlsSetValue"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad11e0"
              }
            ],
            "repeated": 0,
            "id": 341
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FlsGetValue"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ace770"
              }
            ],
            "repeated": 0,
            "id": 342
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FlsAlloc"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad1e20"
              }
            ],
            "repeated": 0,
            "id": 343
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FlsFree"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2050"
              }
            ],
            "repeated": 0,
            "id": 344
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 345
          },
          {
            "timestamp": "2026-04-25 06:56:10,672",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02880000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 346
          },
          {
            "timestamp": "2026-04-25 06:56:10,751",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 347
          },
          {
            "timestamp": "2026-04-25 06:56:10,751",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02890000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 348
          },
          {
            "timestamp": "2026-04-25 06:56:10,751",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02871000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 349
          },
          {
            "timestamp": "2026-04-25 06:56:10,751",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 350
          },
          {
            "timestamp": "2026-04-25 06:56:10,751",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 351
          },
          {
            "timestamp": "2026-04-25 06:56:10,751",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c5a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 352
          },
          {
            "timestamp": "2026-04-25 06:56:10,813",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fd0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 353
          },
          {
            "timestamp": "2026-04-25 06:56:10,813",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c5b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 354
          },
          {
            "timestamp": "2026-04-25 06:56:10,813",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 355
          },
          {
            "timestamp": "2026-04-25 06:56:10,813",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fe0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 356
          },
          {
            "timestamp": "2026-04-25 06:56:10,813",
            "thread_id": "6504",
            "caller": "0x77273ee6",
            "parentcaller": "0x77260d14",
            "category": "synchronization",
            "api": "NtCreateEvent",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000294"
              },
              {
                "name": "EventName",
                "value": "Global\\CorDBIPCSetupSyncEvent_6484"
              },
              {
                "name": "EventType",
                "value": "0"
              },
              {
                "name": "InitialState",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 357
          },
          {
            "timestamp": "2026-04-25 06:56:10,844",
            "thread_id": "6504",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000268"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x7382f3ff"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "5044"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 358
          },
          {
            "timestamp": "2026-04-25 06:56:10,844",
            "thread_id": "6504",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x00000268",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x7382f3ff"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "5044"
              }
            ],
            "repeated": 0,
            "id": 359
          },
          {
            "timestamp": "2026-04-25 06:56:10,844",
            "thread_id": "6504",
            "caller": "0x7727d303",
            "parentcaller": "0x7382f3ea",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000268"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "5044"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 360
          },
          {
            "timestamp": "2026-04-25 06:56:10,844",
            "thread_id": "6504",
            "caller": "0x77261137",
            "parentcaller": "0x7726088e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "MutexName",
                "value": ""
              },
              {
                "name": "InitialOwner",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 361
          },
          {
            "timestamp": "2026-04-25 06:56:10,844",
            "thread_id": "6504",
            "caller": "0x77265900",
            "parentcaller": "0x7382ee08",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              }
            ],
            "repeated": 0,
            "id": 362
          },
          {
            "timestamp": "2026-04-25 06:56:10,844",
            "thread_id": "6504",
            "caller": "0x7382f260",
            "parentcaller": "0x7382f23a",
            "category": "system",
            "api": "IsDebuggerPresent",
            "status": false,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 363
          },
          {
            "timestamp": "2026-04-25 06:56:10,844",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x7382e8be",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 364
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "AddVectoredContinueHandler"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ef8860"
              }
            ],
            "repeated": 0,
            "id": 365
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "RemoveVectoredContinueHandler"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ef8880"
              }
            ],
            "repeated": 0,
            "id": 366
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1e71",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 367
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1ea1",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 368
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "6504",
            "caller": "0x7382e451",
            "parentcaller": "0x7382731e",
            "category": "hooking",
            "api": "SetUnhandledExceptionFilter",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ExceptionFilter",
                "value": "0x73d4e000"
              }
            ],
            "repeated": 0,
            "id": 369
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "6504",
            "caller": "0x77271454",
            "parentcaller": "0x7380c4c9",
            "category": "system",
            "api": "NtDuplicateObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SourceProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "SourceHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "TargetProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "TargetHandle",
                "value": "0x00000220"
              },
              {
                "name": "Options",
                "value": "0x00000002"
              }
            ],
            "repeated": 0,
            "id": 370
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "5044",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c5d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 371
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "5044",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 372
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "5044",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 373
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "5044",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 374
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "5044",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 375
          },
          {
            "timestamp": "2026-04-25 06:56:10,860",
            "thread_id": "5044",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050d1000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 376
          },
          {
            "timestamp": "2026-04-25 06:56:10,876",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73a8acc4",
            "category": "system",
            "api": "NtClose",
            "status": false,
            "return": "0xffffffffc0000008",
            "pretty_return": "INVALID_HANDLE",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 377
          },
          {
            "timestamp": "2026-04-25 06:56:10,876",
            "thread_id": "6504",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "4096"
              }
            ],
            "repeated": 0,
            "id": 378
          },
          {
            "timestamp": "2026-04-25 06:56:10,876",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00861000"
              },
              {
                "name": "RegionSize",
                "value": "0x000ee000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 379
          },
          {
            "timestamp": "2026-04-25 06:56:10,876",
            "thread_id": "6504",
            "caller": "0x77260c1f",
            "parentcaller": "0x7382c16d",
            "category": "synchronization",
            "api": "NtOpenEvent",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "EventName",
                "value": "Global\\CLR_PerfMon_StartEnumEvent"
              }
            ],
            "repeated": 0,
            "id": 380
          },
          {
            "timestamp": "2026-04-25 06:56:10,891",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0288a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 381
          },
          {
            "timestamp": "2026-04-25 06:56:10,891",
            "thread_id": "6504",
            "caller": "0x77274faa",
            "parentcaller": "0x737ff357",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73782000"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00002000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000020",
                "pretty_value": "PAGE_EXECUTE_READ"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 382
          },
          {
            "timestamp": "2026-04-25 06:56:10,891",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02882000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 383
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 384
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c5e000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 385
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7382be89",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets"
              },
              {
                "name": "Handle",
                "value": "0x000002a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets"
              }
            ],
            "repeated": 0,
            "id": 386
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x738da55f",
            "parentcaller": "0x7382bece",
            "category": "registry",
            "api": "RegQueryInfoKeyW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000002a8"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "SubKeyCount",
                "value": "0"
              },
              {
                "name": "MaxSubKeyLength",
                "value": "0"
              },
              {
                "name": "MaxClassLength",
                "value": "0"
              },
              {
                "name": "ValueCount",
                "value": "0"
              },
              {
                "name": "MaxValueNameLength",
                "value": "0"
              },
              {
                "name": "MaxValueLength",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 387
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf0b",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002a8"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "Name",
                "value": "Internet"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\Internet"
              }
            ],
            "repeated": 0,
            "id": 388
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7382bf58",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x000002a8"
              },
              {
                "name": "SubKey",
                "value": "Internet"
              },
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\Internet"
              }
            ],
            "repeated": 0,
            "id": 389
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf8c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "Name",
                "value": "MediaPermission"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\Internet\\MediaPermission"
              }
            ],
            "repeated": 0,
            "id": 390
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf8c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "Name",
                "value": "WebBrowserPermission"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\Internet\\WebBrowserPermission"
              }
            ],
            "repeated": 0,
            "id": 391
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf8c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "Index",
                "value": "2"
              },
              {
                "name": "Name",
                "value": ""
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\Internet\\"
              }
            ],
            "repeated": 0,
            "id": 392
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x7382c090",
            "parentcaller": "0x7382b414",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              }
            ],
            "repeated": 0,
            "id": 393
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf0b",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002a8"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "Name",
                "value": "LocalIntranet"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\LocalIntranet"
              }
            ],
            "repeated": 0,
            "id": 394
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7382bf58",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x000002a8"
              },
              {
                "name": "SubKey",
                "value": "LocalIntranet"
              },
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\LocalIntranet"
              }
            ],
            "repeated": 0,
            "id": 395
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf8c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "Name",
                "value": "MediaPermission"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\LocalIntranet\\MediaPermission"
              }
            ],
            "repeated": 0,
            "id": 396
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf8c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "Name",
                "value": "WebBrowserPermission"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\LocalIntranet\\WebBrowserPermission"
              }
            ],
            "repeated": 0,
            "id": 397
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf8c",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              },
              {
                "name": "Index",
                "value": "2"
              },
              {
                "name": "Name",
                "value": ""
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\LocalIntranet\\"
              }
            ],
            "repeated": 0,
            "id": 398
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x7382c090",
            "parentcaller": "0x7382b414",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002ac"
              }
            ],
            "repeated": 0,
            "id": 399
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x7382bf0b",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002a8"
              },
              {
                "name": "Index",
                "value": "2"
              },
              {
                "name": "Name",
                "value": ""
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\"
              }
            ],
            "repeated": 0,
            "id": 400
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x7382be02",
            "parentcaller": "0x7382b414",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002a8"
              }
            ],
            "repeated": 0,
            "id": 401
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\security.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 402
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\security.config.cch"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 403
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\enterprisesec.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 404
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c60000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 405
          },
          {
            "timestamp": "2026-04-25 06:56:10,907",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\enterprisesec.config.cch"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 406
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77263cc4",
            "parentcaller": "0x738774fa",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000008"
              },
              {
                "name": "TokenHandle",
                "value": "0x000002b0"
              }
            ],
            "repeated": 0,
            "id": 407
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77261446",
            "parentcaller": "0x738773b8",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": false,
            "return": "0xffffffffc0000023",
            "pretty_return": "BUFFER_TOO_SMALL",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "1"
              },
              {
                "name": "TokenInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 408
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77261446",
            "parentcaller": "0x738773f9",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "1"
              },
              {
                "name": "TokenInformation",
                "value": "pA\\xc4\\x00\\x00\\x00\\x00\\x00\\x01\\x05\\x00\\x00\\x00\\x00\\x00\\x05\\x15\\x00\\x00\\x00\\xcc\\x04\\x82\\xdf\\xb2e\\xf3\\xf4\\xc8\\x97L\\xbe\\xe8\\x03\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 409
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "advapi32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 410
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76ea0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "advapi32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 411
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "ConvertSidToStringSidW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe4c0"
              }
            ],
            "repeated": 0,
            "id": 412
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x738775c5",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-3749840076-4109591986-3192690632-1000"
              },
              {
                "name": "Handle",
                "value": "0x000002b4"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-3749840076-4109591986-3192690632-1000"
              }
            ],
            "repeated": 0,
            "id": 413
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x738775de",
            "parentcaller": "0x73877029",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002b4"
              }
            ],
            "repeated": 0,
            "id": 414
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x737e680e",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002b0"
              }
            ],
            "repeated": 0,
            "id": 415
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\shell32"
              },
              {
                "name": "DllBase",
                "value": "0x77590000"
              }
            ],
            "repeated": 0,
            "id": 416
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "shell32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77590000"
              }
            ],
            "repeated": 0,
            "id": 417
          },
          {
            "timestamp": "2026-04-25 06:56:10,954",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x77590000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "shell32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 418
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "shell32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77590000"
              },
              {
                "name": "FunctionName",
                "value": "SHGetFolderPathW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x776edc30"
              }
            ],
            "repeated": 0,
            "id": 419
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e9112f",
            "parentcaller": "0x77e8f0c9",
            "category": "process",
            "api": "NtOpenSection",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d"
              },
              {
                "name": "ObjectAttributes",
                "value": "windows.storage.dll"
              }
            ],
            "repeated": 0,
            "id": 420
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e921cc",
            "parentcaller": "0x77e920d6",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\windows.storage.dll"
              }
            ],
            "repeated": 0,
            "id": 421
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e9e69c",
            "parentcaller": "0x77e9e212",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000002e4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100021",
                "pretty_value": "FILE_READ_ACCESS|FILE_EXECUTE|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\windows.storage.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 422
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e9e6d9",
            "parentcaller": "0x77e9e212",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000002a8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d",
                "pretty_value": "SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_EXECUTE"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x000002e4"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\windows.storage.dll"
              }
            ],
            "repeated": 0,
            "id": 423
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e912bc",
            "parentcaller": "0x77e91427",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000002a8"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75700000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x0060d000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000080",
                "pretty_value": "PAGE_EXECUTE_WRITECOPY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 424
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e9009f",
            "parentcaller": "0x77e90824",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75ca5000"
              },
              {
                "name": "ModuleName",
                "value": "windows.storage.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00002000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 425
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1e71",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 426
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1ea1",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 427
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e79ddb",
            "parentcaller": "0x77e8b530",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75c9f000"
              },
              {
                "name": "ModuleName",
                "value": "windows.storage.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 428
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e9112f",
            "parentcaller": "0x77e8f0c9",
            "category": "process",
            "api": "NtOpenSection",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d"
              },
              {
                "name": "ObjectAttributes",
                "value": "Wldp.dll"
              }
            ],
            "repeated": 0,
            "id": 429
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e9e72d",
            "parentcaller": "0x77e9e212",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002a8"
              }
            ],
            "repeated": 0,
            "id": 430
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e9e735",
            "parentcaller": "0x77e9e212",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002e4"
              }
            ],
            "repeated": 0,
            "id": 431
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e921cc",
            "parentcaller": "0x77e920d6",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\Wldp.dll"
              }
            ],
            "repeated": 0,
            "id": 432
          },
          {
            "timestamp": "2026-04-25 06:56:10,969",
            "thread_id": "6504",
            "caller": "0x77e921cc",
            "parentcaller": "0x77e920d6",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\wldp.dll"
              }
            ],
            "repeated": 0,
            "id": 433
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e9e69c",
            "parentcaller": "0x77e9e3e8",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000002e4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100021",
                "pretty_value": "FILE_READ_ACCESS|FILE_EXECUTE|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\wldp.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 434
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e9e6d9",
            "parentcaller": "0x77e9e3e8",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000002a8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d",
                "pretty_value": "SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_EXECUTE"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x000002e4"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\wldp.dll"
              }
            ],
            "repeated": 0,
            "id": 435
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e912bc",
            "parentcaller": "0x77e91427",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000002a8"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x756d0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x00027000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000080",
                "pretty_value": "PAGE_EXECUTE_WRITECOPY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 436
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e9009f",
            "parentcaller": "0x77e90824",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x756f2000"
              },
              {
                "name": "ModuleName",
                "value": "Wldp.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 437
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1e71",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 438
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1ea1",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 439
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e79ddb",
            "parentcaller": "0x77e8b530",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x756f0000"
              },
              {
                "name": "ModuleName",
                "value": "Wldp.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 440
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e9e72d",
            "parentcaller": "0x77e9e3e8",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002a8"
              }
            ],
            "repeated": 0,
            "id": 441
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e9e735",
            "parentcaller": "0x77e9e3e8",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002e4"
              }
            ],
            "repeated": 0,
            "id": 442
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e90da0",
            "parentcaller": "0x77e7e523",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75c9f000"
              },
              {
                "name": "ModuleName",
                "value": "windows.storage.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 443
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e90f7a",
            "parentcaller": "0x77e90dc2",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "35"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x06\\x00\\x00\\x00\\x07\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00e\\x00\\\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00a\\x00t\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00c\\x00a\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00m\\x00p\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00p\\x00.\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 444
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e90da0",
            "parentcaller": "0x77e7e523",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x756f0000"
              },
              {
                "name": "ModuleName",
                "value": "Wldp.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 445
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "DDRAW.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 446
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D8.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 447
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D9.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 448
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9851",
            "parentcaller": "0x750d8c22",
            "category": "misc",
            "api": "RtlDosPathNameToNtPathName_U",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DosFileName",
                "value": "C:\\Windows\\SYSTEM32\\Wldp.dll"
              }
            ],
            "repeated": 0,
            "id": 449
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9890",
            "parentcaller": "0x750d8c22",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000002e4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020000",
                "pretty_value": "READ_CONTROL"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\wldp.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 450
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9931",
            "parentcaller": "0x750d8c22",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002e4"
              }
            ],
            "repeated": 0,
            "id": 451
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9931",
            "parentcaller": "0x750d8c22",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\Wldp"
              },
              {
                "name": "DllBase",
                "value": "0x756d0000"
              }
            ],
            "repeated": 0,
            "id": 452
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "DDRAW.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 453
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D8.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 454
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D9.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 455
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9851",
            "parentcaller": "0x750d8c22",
            "category": "misc",
            "api": "RtlDosPathNameToNtPathName_U",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DosFileName",
                "value": "C:\\Windows\\SYSTEM32\\windows.storage.dll"
              }
            ],
            "repeated": 0,
            "id": 456
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9890",
            "parentcaller": "0x750d8c22",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000002e4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020000",
                "pretty_value": "READ_CONTROL"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\windows.storage.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 457
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9931",
            "parentcaller": "0x750d8c22",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000002e4"
              }
            ],
            "repeated": 0,
            "id": 458
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x750d9931",
            "parentcaller": "0x750d8c22",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\windows.storage"
              },
              {
                "name": "DllBase",
                "value": "0x75700000"
              }
            ],
            "repeated": 0,
            "id": 459
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772656f1",
            "parentcaller": "0x756d69fd",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "api-ms-win-eventing-provider-l1-1-0.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77150000"
              }
            ],
            "repeated": 0,
            "id": 460
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x756d6a24",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNELBASE.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77150000"
              },
              {
                "name": "FunctionName",
                "value": "EventSetInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e70b80"
              }
            ],
            "repeated": 0,
            "id": 461
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x758dd258",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "api-ms-win-core-synch-l1-2-0.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77150000"
              }
            ],
            "repeated": 0,
            "id": 462
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x758dd27f",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNELBASE.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77150000"
              },
              {
                "name": "FunctionName",
                "value": "InitializeConditionVariable"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ea4e10"
              }
            ],
            "repeated": 0,
            "id": 463
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x758dd28d",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNELBASE.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77150000"
              },
              {
                "name": "FunctionName",
                "value": "SleepConditionVariableCS"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77308040"
              }
            ],
            "repeated": 0,
            "id": 464
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x758dd29b",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNELBASE.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77150000"
              },
              {
                "name": "FunctionName",
                "value": "WakeAllConditionVariable"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eaa570"
              }
            ],
            "repeated": 0,
            "id": 465
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e8ff5f",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75ca5000"
              },
              {
                "name": "ModuleName",
                "value": "windows.storage.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 466
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75ca5000"
              },
              {
                "name": "ModuleName",
                "value": "windows.storage.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 467
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c63000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 468
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c64000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 469
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x758979ad",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 470
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x7589797e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlRegisterFeatureConfigurationChangeNotification"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e724f0"
              }
            ],
            "repeated": 0,
            "id": 471
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x75897868",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtQueryWnfStateData"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb40c0"
              }
            ],
            "repeated": 0,
            "id": 472
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x758977e7",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlSubscribeWnfStateChangeNotification"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e70780"
              }
            ],
            "repeated": 0,
            "id": 473
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x7584a3ba",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlDisownModuleHeapAllocation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eac2a0"
              }
            ],
            "repeated": 0,
            "id": 474
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x75897927",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlQueryFeatureConfiguration"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ea52e0"
              }
            ],
            "repeated": 0,
            "id": 475
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x758486ce",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlDllShutdownInProgress"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e9f5a0"
              }
            ],
            "repeated": 0,
            "id": 476
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x77261137",
            "parentcaller": "0x75897ab1",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x40000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000304"
              },
              {
                "name": "MutexName",
                "value": "Local\\SM0:6484:168:WilStaging_02"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 477
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772627d9",
            "parentcaller": "0x75897cac",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000304"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 478
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772627d9",
            "parentcaller": "0x77262732",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 479
          },
          {
            "timestamp": "2026-04-25 06:56:10,985",
            "thread_id": "6504",
            "caller": "0x772627d9",
            "parentcaller": "0x77262732",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000308"
              },
              {
                "name": "Milliseconds",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 480
          },
          {
            "timestamp": "2026-04-25 06:56:11,001",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x7582f2ae",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000308"
              }
            ],
            "repeated": 0,
            "id": 481
          },
          {
            "timestamp": "2026-04-25 06:56:11,001",
            "thread_id": "6504",
            "caller": "0x77265900",
            "parentcaller": "0x75897c8b",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000304"
              }
            ],
            "repeated": 1,
            "id": 482
          },
          {
            "timestamp": "2026-04-25 06:56:11,001",
            "thread_id": "6504",
            "caller": "0x77e8ff5f",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77ae5000"
              },
              {
                "name": "ModuleName",
                "value": "shell32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 483
          },
          {
            "timestamp": "2026-04-25 06:56:11,001",
            "thread_id": "6504",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77ae5000"
              },
              {
                "name": "ModuleName",
                "value": "shell32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 484
          },
          {
            "timestamp": "2026-04-25 06:56:11,001",
            "thread_id": "6504",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\SHCORE"
              },
              {
                "name": "DllBase",
                "value": "0x76f70000"
              }
            ],
            "repeated": 0,
            "id": 485
          },
          {
            "timestamp": "2026-04-25 06:56:11,016",
            "thread_id": "6504",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "__notification__",
            "api": "sysenter",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadIdentifier",
                "value": "6504"
              },
              {
                "name": "Module",
                "value": "KERNELBASE.dll"
              },
              {
                "name": "Return Address",
                "value": "0x772833ec"
              }
            ],
            "repeated": 0,
            "id": 486
          },
          {
            "timestamp": "2026-04-25 06:56:13,110",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x7726961e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 487
          },
          {
            "timestamp": "2026-04-25 06:56:13,110",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x7726961e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\profapi"
              },
              {
                "name": "DllBase",
                "value": "0x75260000"
              }
            ],
            "repeated": 0,
            "id": 488
          },
          {
            "timestamp": "2026-04-25 06:56:13,110",
            "thread_id": "6504",
            "caller": "0x758a5bf1",
            "parentcaller": "0x757e6154",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 489
          },
          {
            "timestamp": "2026-04-25 06:56:13,110",
            "thread_id": "6504",
            "caller": "0x758a5bf1",
            "parentcaller": "0x757e6154",
            "category": "filesystem",
            "api": "SHGetFolderPathW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Folder",
                "value": "0x0000801a",
                "pretty_value": "CSIDL_FLAG_CREATE|CSIDL_APPDATA"
              },
              {
                "name": "Path",
                "value": "C:\\Users\\cape\\AppData\\Roaming"
              }
            ],
            "repeated": 0,
            "id": 490
          },
          {
            "timestamp": "2026-04-25 06:56:13,110",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\Microsoft\\CLR Security Config\\v2.0.50727.312\\security.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 491
          },
          {
            "timestamp": "2026-04-25 06:56:13,110",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\Microsoft\\CLR Security Config\\v2.0.50727.312\\security.config.cch"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 492
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7382b8a4",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework\\v2.0.50727\\Security\\Policy"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\v2.0.50727\\Security\\Policy"
              }
            ],
            "repeated": 0,
            "id": 493
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726f231",
            "parentcaller": "0x7382b825",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 494
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FlushProcessWriteBuffers"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb3930"
              }
            ],
            "repeated": 0,
            "id": 495
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x73836fc7",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "Kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 496
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetWriteWatch"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0590"
              }
            ],
            "repeated": 0,
            "id": 497
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "ResetWriteWatch"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0740"
              }
            ],
            "repeated": 0,
            "id": 498
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x04f30000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 499
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x77275e92",
            "parentcaller": "0x77275e55",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x04f30000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 500
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x73837046",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "Kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 501
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateMemoryResourceNotification"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac9950"
              }
            ],
            "repeated": 0,
            "id": 502
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "QueryMemoryResourceNotification"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ae4380"
              }
            ],
            "repeated": 0,
            "id": 503
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x7724e4c2",
            "parentcaller": "0x73837085",
            "category": "synchronization",
            "api": "NtOpenEvent",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000334"
              },
              {
                "name": "EventName",
                "value": "\\KernelObjects\\LowMemoryCondition"
              }
            ],
            "repeated": 0,
            "id": 504
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05510000"
              },
              {
                "name": "RegionSize",
                "value": "0x02000000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 505
          },
          {
            "timestamp": "2026-04-25 06:56:13,126",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x04f30000"
              },
              {
                "name": "RegionSize",
                "value": "0x000a0000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 506
          },
          {
            "timestamp": "2026-04-25 06:56:13,141",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c67000"
              },
              {
                "name": "RegionSize",
                "value": "0x00009000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 507
          },
          {
            "timestamp": "2026-04-25 06:56:13,141",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05510000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 508
          },
          {
            "timestamp": "2026-04-25 06:56:13,141",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06510000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 509
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "6504",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000364"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00c495f0"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "2396"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 510
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "6504",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x00000364",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00c495f0"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "2396"
              }
            ],
            "repeated": 0,
            "id": 511
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "6504",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000364"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "2396"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 512
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 513
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c70000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 514
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "6504",
            "caller": "0x738b0bc8",
            "parentcaller": "0x738769ba",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\"
              }
            ],
            "repeated": 0,
            "id": 515
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "2396",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 516
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "2396",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 517
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "2396",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 518
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "2396",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 519
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "2396",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07511000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 520
          },
          {
            "timestamp": "2026-04-25 06:56:13,297",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000348"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 521
          },
          {
            "timestamp": "2026-04-25 06:56:13,454",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32"
              },
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32"
              }
            ],
            "repeated": 0,
            "id": 522
          },
          {
            "timestamp": "2026-04-25 06:56:13,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7387455e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "ValueName",
                "value": "LatestIndex"
              },
              {
                "name": "Data",
                "value": "12"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex"
              }
            ],
            "repeated": 0,
            "id": 523
          },
          {
            "timestamp": "2026-04-25 06:56:13,454",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c72000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 524
          },
          {
            "timestamp": "2026-04-25 06:56:13,454",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32"
              },
              {
                "name": "Handle",
                "value": "0x00000368"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32"
              }
            ],
            "repeated": 0,
            "id": 525
          },
          {
            "timestamp": "2026-04-25 06:56:13,454",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7387455e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000368"
              },
              {
                "name": "ValueName",
                "value": "LatestIndex"
              },
              {
                "name": "Data",
                "value": "12"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex"
              }
            ],
            "repeated": 0,
            "id": 526
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000036c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\indexc.dat"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 527
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "indexc"
              },
              {
                "name": "Handle",
                "value": "0x00000370"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc"
              }
            ],
            "repeated": 0,
            "id": 528
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000370"
              },
              {
                "name": "ValueName",
                "value": "NIUsageMask"
              },
              {
                "name": "Data",
                "value": "\\xff\\xe1"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\NIUsageMask"
              }
            ],
            "repeated": 0,
            "id": 529
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000370"
              },
              {
                "name": "ValueName",
                "value": "ILUsageMask"
              },
              {
                "name": "Data",
                "value": "\\xff\\xff\\xff\\xf1"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\ILUsageMask"
              }
            ],
            "repeated": 0,
            "id": 530
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x738282f8",
            "parentcaller": "0x73828318",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000370"
              }
            ],
            "repeated": 0,
            "id": 531
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x73874593",
            "parentcaller": "0x7387471e",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 532
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\181938c6\\7950e2c5"
              },
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5"
              }
            ],
            "repeated": 0,
            "id": 533
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x737ddd78",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "Name",
                "value": "1"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1"
              }
            ],
            "repeated": 0,
            "id": 534
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x737ddde9",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "Name",
                "value": ""
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\"
              }
            ],
            "repeated": 0,
            "id": 535
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737dde65",
            "parentcaller": "0x737dded6",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 536
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\181938c6\\7950e2c5\\1"
              },
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1"
              }
            ],
            "repeated": 0,
            "id": 537
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "mscorlib,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 538
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "ValueName",
                "value": "ConfigMask"
              },
              {
                "name": "Data",
                "value": "4361"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigMask"
              }
            ],
            "repeated": 0,
            "id": 539
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "ValueName",
                "value": "ConfigString"
              },
              {
                "name": "Data",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigString"
              }
            ],
            "repeated": 0,
            "id": 540
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              },
              {
                "name": "ValueName",
                "value": "MVID"
              },
              {
                "name": "Data",
                "value": "\\x07\\xfe\\xde\\xcf;\\x96LM&\\xa6\\xec\\x99B&\\xef\\xe4"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MVID"
              }
            ],
            "repeated": 0,
            "id": 541
          },
          {
            "timestamp": "2026-04-25 06:56:13,641",
            "thread_id": "6504",
            "caller": "0x737eb7d1",
            "parentcaller": "0x737eb8c2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 542
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\181938c6\\7950e2c5\\1"
              },
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1"
              }
            ],
            "repeated": 0,
            "id": 543
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "EvalationData"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\EvalationData"
              }
            ],
            "repeated": 0,
            "id": 544
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\Status"
              }
            ],
            "repeated": 0,
            "id": 545
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "ILDependencies"
              },
              {
                "name": "Data",
                "value": "\\xc5\\xe2Py\\xba{\\xb8\\x0c\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ILDependencies"
              }
            ],
            "repeated": 0,
            "id": 546
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "NIDependencies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\NIDependencies"
              }
            ],
            "repeated": 0,
            "id": 547
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "MissingDependencies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MissingDependencies"
              }
            ],
            "repeated": 0,
            "id": 548
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737eb7d1",
            "parentcaller": "0x737eb8c2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              }
            ],
            "repeated": 0,
            "id": 549
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\7950e2c5\\cb87bba\\1"
              },
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1"
              }
            ],
            "repeated": 0,
            "id": 550
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "mscorlib,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 551
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "8198"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Status"
              }
            ],
            "repeated": 0,
            "id": 552
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "Data",
                "value": "sortkey.nlp|sorttbls.nlp|big5.nlp|bopomofo.nlp|ksc.nlp|prc.nlp|prcp.nlp|xjis.nlp|normidna.nlp|normnfc.nlp|normnfd.nlp|normnfkc.nlp|normnfkd.nlp"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Modules"
              }
            ],
            "repeated": 0,
            "id": 553
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "\\xb23\\xc7M\\xdf\\xb0\\xb0D\\xba\\xbf+\\xb7\\xcf\\xfd\\xf4\\xab\\x91th\\x7f\\xa9w\\xa2\\xc6\\xae\\xd2Yqa\\xe9\\xe1\\x81\\x9d\\xe9K\\xa9"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\SIG"
              }
            ],
            "repeated": 0,
            "id": 554
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "m\\xa7>\\xfb\\x06\\xac\\xdc\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 555
          },
          {
            "timestamp": "2026-04-25 06:56:13,876",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              }
            ],
            "repeated": 0,
            "id": 556
          },
          {
            "timestamp": "2026-04-25 06:56:14,001",
            "thread_id": "6504",
            "caller": "0x7382a3f3",
            "parentcaller": "0x7382a421",
            "category": "registry",
            "api": "RegCreateKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion\\GACChangeNotification\\Default"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "Access",
                "value": "0x00020119",
                "pretty_value": "KEY_QUERY_VALUE|KEY_ENUMERATE_SUB_KEYS|KEY_NOTIFY|KEY_WOW64_64KEY|STANDARD_RIGHTS_REQUIRED"
              },
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\GACChangeNotification\\Default"
              },
              {
                "name": "Disposition",
                "value": "2",
                "pretty_value": "REG_OPENED_EXISTING_KEY"
              }
            ],
            "repeated": 0,
            "id": 557
          },
          {
            "timestamp": "2026-04-25 06:56:14,001",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "mscorlib,2.0.0.0,,b77a5c561934e089,x86"
              },
              {
                "name": "Data",
                "value": "m\\xa7>\\xfb\\x06\\xac\\xdc\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\mscorlib,2.0.0.0,,b77a5c561934e089,x86"
              }
            ],
            "repeated": 0,
            "id": 558
          },
          {
            "timestamp": "2026-04-25 06:56:14,001",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c73000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 559
          },
          {
            "timestamp": "2026-04-25 06:56:14,001",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 560
          },
          {
            "timestamp": "2026-04-25 06:56:17,876",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\07fedecf3b964c4d26a6ec994226efe4\\mscorlib.ni"
              },
              {
                "name": "DllBase",
                "value": "0x72be0000"
              }
            ],
            "repeated": 0,
            "id": 561
          },
          {
            "timestamp": "2026-04-25 06:56:17,876",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\07fedecf3b964c4d26a6ec994226efe4\\mscorlib.ni.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x72be0000"
              }
            ],
            "repeated": 0,
            "id": 562
          },
          {
            "timestamp": "2026-04-25 06:56:17,876",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x72be0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\07fedecf3b964c4d26a6ec994226efe4\\mscorlib.ni.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 563
          },
          {
            "timestamp": "2026-04-25 06:56:18,844",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 564
          },
          {
            "timestamp": "2026-04-25 06:56:18,844",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "MSCORWKS.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 565
          },
          {
            "timestamp": "2026-04-25 06:56:18,844",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscorjit.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x72d80618"
              }
            ],
            "repeated": 0,
            "id": 566
          },
          {
            "timestamp": "2026-04-25 06:56:19,032",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x737dbded",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.INI"
              }
            ],
            "repeated": 0,
            "id": 567
          },
          {
            "timestamp": "2026-04-25 06:56:19,032",
            "thread_id": "6504",
            "caller": "0x77260b65",
            "parentcaller": "0x73829acc",
            "category": "synchronization",
            "api": "NtOpenMutant",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "MutexName",
                "value": "Global\\CLR_CASOFF_MUTEX"
              }
            ],
            "repeated": 0,
            "id": 568
          },
          {
            "timestamp": "2026-04-25 06:56:19,110",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fd0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 569
          },
          {
            "timestamp": "2026-04-25 06:56:19,547",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c74000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 570
          },
          {
            "timestamp": "2026-04-25 06:56:20,344",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02892000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 571
          },
          {
            "timestamp": "2026-04-25 06:56:20,922",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06512000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 572
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x772627d9",
            "parentcaller": "0x77262732",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 573
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x772627d9",
            "parentcaller": "0x77262732",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "Milliseconds",
                "value": "3000"
              }
            ],
            "repeated": 0,
            "id": 574
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77265900",
            "parentcaller": "0x73878c84",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              }
            ],
            "repeated": 0,
            "id": 575
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 576
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77262ba1",
            "parentcaller": "0x76ace2b9",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "12"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x00\\x80\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 577
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77264429",
            "parentcaller": "0x76ace2c9",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 578
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c62138",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0x3a6eea36"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01d5acdd"
              }
            ],
            "repeated": 0,
            "id": 579
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 580
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c624b8",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0xb450bd8e"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01dcac11"
              }
            ],
            "repeated": 0,
            "id": 581
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 582
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c627f8",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0xb45caeb0"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01dcac11"
              }
            ],
            "repeated": 0,
            "id": 583
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 584
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c627b8",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0xb45f137b"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01dcac11"
              }
            ],
            "repeated": 0,
            "id": 585
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 586
          },
          {
            "timestamp": "2026-04-25 06:56:21,282",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ace434",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c627f8",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0xb45f137b"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01dcac11"
              }
            ],
            "repeated": 0,
            "id": 587
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ace44d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 588
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77262ba1",
            "parentcaller": "0x76ace569",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "12"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 589
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 590
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77262ba1",
            "parentcaller": "0x76ac6d31",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "12"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x00\\x80\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 591
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77264429",
            "parentcaller": "0x76ac6d41",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 592
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x76ac6eac",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": true,
            "return": "0x00c625f8",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "FirstCreateTimeLow",
                "value": "0x56cbf0e8"
              },
              {
                "name": "FirstCreateTimeHigh",
                "value": "0x01dcacc6"
              }
            ],
            "repeated": 0,
            "id": 593
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77275d68",
            "parentcaller": "0x76ac6ec5",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000338"
              }
            ],
            "repeated": 0,
            "id": 594
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77262ba1",
            "parentcaller": "0x76ac7095",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "12"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 595
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 596
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ole32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 597
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ole32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 598
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x772628b2",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ole32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77060000"
              }
            ],
            "repeated": 0,
            "id": 599
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "CoInitializeEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77bfd0d0"
              }
            ],
            "repeated": 0,
            "id": 600
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x772656f1",
            "parentcaller": "0x77be835f",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\system32\\rpcss.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x0000001e"
              }
            ],
            "repeated": 0,
            "id": 601
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77c708e6",
            "parentcaller": "0x77c70886",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "0",
                "pretty_value": "FILE_SUPERSEDE"
              }
            ],
            "repeated": 0,
            "id": 602
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e8ff5f",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77d97000"
              },
              {
                "name": "ModuleName",
                "value": "combase.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 603
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77d97000"
              },
              {
                "name": "ModuleName",
                "value": "combase.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 604
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c75000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 605
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e9112f",
            "parentcaller": "0x77e8f0c9",
            "category": "process",
            "api": "NtOpenSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x0000037c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d"
              },
              {
                "name": "ObjectAttributes",
                "value": "bcryptPrimitives.dll"
              }
            ],
            "repeated": 0,
            "id": 606
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e912bc",
            "parentcaller": "0x77e91427",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x0000037c"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76d80000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x0005f000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000080",
                "pretty_value": "PAGE_EXECUTE_WRITECOPY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 607
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1e71",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 608
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77ea1ee8",
            "parentcaller": "0x77ea1ea1",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 609
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e79ddb",
            "parentcaller": "0x77e8b530",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76dda000"
              },
              {
                "name": "ModuleName",
                "value": "bcryptPrimitives.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 610
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e8f149",
            "parentcaller": "0x77e923c8",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000037c"
              }
            ],
            "repeated": 0,
            "id": 611
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x77e90da0",
            "parentcaller": "0x77e7e523",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76dda000"
              },
              {
                "name": "ModuleName",
                "value": "bcryptPrimitives.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 612
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "DDRAW.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 613
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D8.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 614
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x750d9699",
            "parentcaller": "0x750d940b",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D9.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 615
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x750d9851",
            "parentcaller": "0x750d8c22",
            "category": "misc",
            "api": "RtlDosPathNameToNtPathName_U",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DosFileName",
                "value": "C:\\Windows\\System32\\bcryptPrimitives.dll"
              }
            ],
            "repeated": 0,
            "id": 616
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x750d9890",
            "parentcaller": "0x750d8c22",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000037c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020000",
                "pretty_value": "READ_CONTROL"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\bcryptPrimitives.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 617
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x750d9931",
            "parentcaller": "0x750d8c22",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000037c"
              }
            ],
            "repeated": 0,
            "id": 618
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x750d9931",
            "parentcaller": "0x750d8c22",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\bcryptPrimitives"
              },
              {
                "name": "DllBase",
                "value": "0x76d80000"
              }
            ],
            "repeated": 0,
            "id": 619
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76db3a14",
            "parentcaller": "0x76da92e7",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000388"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000001",
                "pretty_value": "KEY_QUERY_VALUE"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy"
              }
            ],
            "repeated": 0,
            "id": 620
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76db3a31",
            "parentcaller": "0x76da92e7",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000388"
              },
              {
                "name": "ValueName",
                "value": "STE"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\STE"
              }
            ],
            "repeated": 0,
            "id": 621
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76db3a5f",
            "parentcaller": "0x76da92e7",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000388"
              }
            ],
            "repeated": 0,
            "id": 622
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da9836",
            "parentcaller": "0x76da973c",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000388"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000001",
                "pretty_value": "KEY_QUERY_VALUE"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy"
              }
            ],
            "repeated": 0,
            "id": 623
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da9858",
            "parentcaller": "0x76da973c",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000388"
              },
              {
                "name": "ValueName",
                "value": "Enabled"
              },
              {
                "name": "Type",
                "value": "4",
                "pretty_value": "REG_DWORD"
              },
              {
                "name": "Information",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled"
              }
            ],
            "repeated": 0,
            "id": 624
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da98e5",
            "parentcaller": "0x76da973c",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x0000038c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000001",
                "pretty_value": "KEY_QUERY_VALUE"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa"
              }
            ],
            "repeated": 0,
            "id": 625
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da9907",
            "parentcaller": "0x76da973c",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x0000038c"
              },
              {
                "name": "ValueName",
                "value": "FipsAlgorithmPolicy"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy"
              }
            ],
            "repeated": 0,
            "id": 626
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da995a",
            "parentcaller": "0x76da973c",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000388"
              },
              {
                "name": "ValueName",
                "value": "MDMEnabled"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled"
              }
            ],
            "repeated": 0,
            "id": 627
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da9985",
            "parentcaller": "0x76da973c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000388"
              }
            ],
            "repeated": 0,
            "id": 628
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da9993",
            "parentcaller": "0x76da973c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000038c"
              }
            ],
            "repeated": 0,
            "id": 629
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da9790",
            "parentcaller": "0x76da9351",
            "category": "registry",
            "api": "NtOpenKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000001",
                "pretty_value": "KEY_QUERY_VALUE"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Policies\\Microsoft\\Cryptography\\Configuration"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Policies\\Microsoft\\Cryptography\\Configuration"
              }
            ],
            "repeated": 0,
            "id": 630
          },
          {
            "timestamp": "2026-04-25 06:56:21,297",
            "thread_id": "6504",
            "caller": "0x76da96e4",
            "parentcaller": "0x76da9643",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000038c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "\\Device\\CNG"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 631
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x76da966e",
            "parentcaller": "0x76da95e5",
            "category": "device",
            "api": "DeviceIoControl",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DeviceHandle",
                "value": "0x0000038c"
              },
              {
                "name": "IoControlCode",
                "value": "0x00390008",
                "pretty_value": "IOCTL_KSEC_RANDOM_FILL_BUFFER"
              },
              {
                "name": "InBuffer",
                "value": ""
              },
              {
                "name": "OutBuffer",
                "value": "\\xce\\x12\\xdd\\x0c*\\xa2R\\xb2\\x16\\xceY\\xc5\\xb8W\\x05(\\xdb\\xd96Ak\\xe4WD\\x06\\xf0\\xfd\\x90!\\xf7RXl\\x14\\x89M\\x04X\\xc2]\\xf3b\\xe7\\x1b\\xff\\xb1\\x0fq"
              }
            ],
            "repeated": 0,
            "id": 632
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77e8ff5f",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x769b1000"
              },
              {
                "name": "ModuleName",
                "value": "RPCRT4.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 633
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x769b1000"
              },
              {
                "name": "ModuleName",
                "value": "RPCRT4.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 634
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c76000"
              },
              {
                "name": "RegionSize",
                "value": "0x00004000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 635
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77e8ff5f",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77d97000"
              },
              {
                "name": "ModuleName",
                "value": "combase.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 636
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77d97000"
              },
              {
                "name": "ModuleName",
                "value": "combase.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 637
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x75d4f2f1",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\system32\\uxtheme"
              },
              {
                "name": "DllBase",
                "value": "0x745d0000"
              }
            ],
            "repeated": 0,
            "id": 638
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x75d4f2f1",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\uxtheme.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x745d0000"
              }
            ],
            "repeated": 0,
            "id": 639
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x772696ea",
            "parentcaller": "0x75d4f331",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "uxtheme.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x745d0000"
              },
              {
                "name": "FunctionName",
                "value": "ThemeInitApiHook"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x74604330"
              }
            ],
            "repeated": 0,
            "id": 640
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x7460456c",
            "parentcaller": "0x7460434f",
            "category": "system",
            "api": "IsDebuggerPresent",
            "status": false,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 641
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77e93999",
            "parentcaller": "0x77e6d7e4",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "1"
              },
              {
                "name": "TokenInformation",
                "value": "\\x00\\xed\\x95\\x00\\x00\\x00\\x00\\x00\\x01\\x05\\x00\\x00\\x00\\x00\\x00\\x05\\x15\\x00\\x00\\x00\\xcc\\x04\\x82\\xdf\\xb2e\\xf3\\xf4\\xc8\\x97L\\xbe\\xe8\\x03\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xd0>`t\\x01\\xf4\\xb0-\\x98\\xed\\x95\\x00\\xe1>`t"
              }
            ],
            "repeated": 0,
            "id": 642
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77e6d817",
            "parentcaller": "0x7727b6b7",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000380"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020019",
                "pretty_value": "KEY_READ"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\REGISTRY\\USER\\S-1-5-21-3749840076-4109591986-3192690632-1000"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_CURRENT_USER"
              }
            ],
            "repeated": 0,
            "id": 643
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77257324",
            "parentcaller": "0x77256e95",
            "category": "registry",
            "api": "NtOpenKeyEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000394"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000001",
                "pretty_value": "KEY_QUERY_VALUE"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000380"
              },
              {
                "name": "ObjectAttributesName",
                "value": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize"
              }
            ],
            "repeated": 0,
            "id": 644
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77256a63",
            "parentcaller": "0x77256853",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000394"
              },
              {
                "name": "ValueName",
                "value": "AppsUseLightTheme"
              },
              {
                "name": "Type",
                "value": "4",
                "pretty_value": "REG_DWORD"
              },
              {
                "name": "Information",
                "value": "1"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize\\AppsUseLightTheme"
              }
            ],
            "repeated": 0,
            "id": 645
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77257f8b",
            "parentcaller": "0x7725632a",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000394"
              }
            ],
            "repeated": 0,
            "id": 646
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x77257f8b",
            "parentcaller": "0x7460451b",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000380"
              }
            ],
            "repeated": 0,
            "id": 647
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x7380cc0a",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 648
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "QueryActCtxW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac8760"
              }
            ],
            "repeated": 0,
            "id": 649
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "2396",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ole32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77060000"
              }
            ],
            "repeated": 0,
            "id": 650
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "2396",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x77060000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "ole32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 651
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "2396",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "CoGetContextToken"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77c72020"
              }
            ],
            "repeated": 0,
            "id": 652
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 653
          },
          {
            "timestamp": "2026-04-25 06:56:21,313",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000348"
              },
              {
                "name": "Milliseconds",
                "value": "2000"
              }
            ],
            "repeated": 0,
            "id": 654
          },
          {
            "timestamp": "2026-04-25 06:56:24,704",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 655
          },
          {
            "timestamp": "2026-04-25 06:56:24,704",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76ab0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "kernel32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 656
          },
          {
            "timestamp": "2026-04-25 06:56:24,704",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02890000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 657
          },
          {
            "timestamp": "2026-04-25 06:56:24,704",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetVersionEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 658
          },
          {
            "timestamp": "2026-04-25 06:56:24,704",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetVersionExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad18a0"
              }
            ],
            "repeated": 0,
            "id": 659
          },
          {
            "timestamp": "2026-04-25 06:56:24,704",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetVersionEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 660
          },
          {
            "timestamp": "2026-04-25 06:56:24,704",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetVersionExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad18a0"
              }
            ],
            "repeated": 0,
            "id": 661
          },
          {
            "timestamp": "2026-04-25 06:56:24,751",
            "thread_id": "6504",
            "caller": "0x0288a110",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtQueryLicenseValue",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Name",
                "value": "TerminalServices-RemoteConnectionManager-AllowAppServerMode"
              },
              {
                "name": "Type",
                "value": "0x00000004"
              }
            ],
            "repeated": 0,
            "id": 662
          },
          {
            "timestamp": "2026-04-25 06:56:24,876",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000394"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\l_intl.nls"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 663
          },
          {
            "timestamp": "2026-04-25 06:56:24,876",
            "thread_id": "6504",
            "caller": "0x7727081d",
            "parentcaller": "0x73827c47",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000394"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\SysWOW64\\l_intl.nls"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x000\\x00\\x00\\x00\\x00\\x00\\x00\\xc6&\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 664
          },
          {
            "timestamp": "2026-04-25 06:56:24,876",
            "thread_id": "6504",
            "caller": "0x77260e58",
            "parentcaller": "0x77260abe",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003a8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000394"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\l_intl.nls"
              }
            ],
            "repeated": 0,
            "id": 665
          },
          {
            "timestamp": "2026-04-25 06:56:24,876",
            "thread_id": "6504",
            "caller": "0x7726f16b",
            "parentcaller": "0x73827c8b",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003a8"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x04fd0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095e6d4"
              },
              {
                "name": "ViewSize",
                "value": "0x00003000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 666
          },
          {
            "timestamp": "2026-04-25 06:56:24,876",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73827c9a",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000394"
              }
            ],
            "repeated": 0,
            "id": 667
          },
          {
            "timestamp": "2026-04-25 06:56:24,876",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73827c9d",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 668
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFullPathName"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 669
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFullPathNameW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad33d0"
              }
            ],
            "repeated": 0,
            "id": 670
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c7a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 671
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 672
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c7b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 673
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x738b0bc8",
            "parentcaller": "0x738769ba",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\"
              }
            ],
            "repeated": 0,
            "id": 674
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73df23f8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework\\Policy\\AppPatch"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Policy\\AppPatch"
              }
            ],
            "repeated": 0,
            "id": 675
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x77277bae",
            "parentcaller": "0x73df2c0b",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319"
              }
            ],
            "repeated": 0,
            "id": 676
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73df23f8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x000003a8"
              },
              {
                "name": "SubKey",
                "value": "v4.0.30319.00000"
              },
              {
                "name": "Handle",
                "value": "0x00000394"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000"
              }
            ],
            "repeated": 0,
            "id": 677
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x73db760b",
            "parentcaller": "0x73df0f0e",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 678
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x73db7a31",
            "parentcaller": "0x73df23f8",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "mscorwks.dll"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000\\mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 679
          },
          {
            "timestamp": "2026-04-25 06:56:25,532",
            "thread_id": "6504",
            "caller": "0x73db760b",
            "parentcaller": "0x73df0b0a",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000394"
              }
            ],
            "repeated": 0,
            "id": 680
          },
          {
            "timestamp": "2026-04-25 06:56:25,704",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05512000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 681
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x758a5bf1",
            "parentcaller": "0x757e6154",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 682
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x758a5bf1",
            "parentcaller": "0x757e6154",
            "category": "filesystem",
            "api": "SHGetFolderPathW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Folder",
                "value": "0x00000020",
                "pretty_value": "CSIDL_INTERNET_CACHE"
              },
              {
                "name": "Path",
                "value": "C:\\Users\\cape\\AppData\\Local\\Microsoft\\Windows\\INetCache"
              }
            ],
            "repeated": 0,
            "id": 683
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 684
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c7d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 685
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x77264429",
            "parentcaller": "0x737ddb34",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe.config"
              }
            ],
            "repeated": 0,
            "id": 686
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x77277bae",
            "parentcaller": "0x738b0d86",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 1,
            "id": 687
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32"
              },
              {
                "name": "Handle",
                "value": "0x000003b0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32"
              }
            ],
            "repeated": 0,
            "id": 688
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7387455e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003b0"
              },
              {
                "name": "ValueName",
                "value": "LatestIndex"
              },
              {
                "name": "Data",
                "value": "12"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex"
              }
            ],
            "repeated": 0,
            "id": 689
          },
          {
            "timestamp": "2026-04-25 06:56:26,016",
            "thread_id": "6504",
            "caller": "0x73874593",
            "parentcaller": "0x7387471e",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003b0"
              }
            ],
            "repeated": 0,
            "id": 690
          },
          {
            "timestamp": "2026-04-25 06:56:26,063",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\5aa75839\\10fdf3"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\5aa75839\\10fdf3"
              }
            ],
            "repeated": 0,
            "id": 691
          },
          {
            "timestamp": "2026-04-25 06:56:26,063",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 692
          },
          {
            "timestamp": "2026-04-25 06:56:26,219",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x737dbded",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.INI"
              }
            ],
            "repeated": 0,
            "id": 693
          },
          {
            "timestamp": "2026-04-25 06:56:26,235",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02891000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 694
          },
          {
            "timestamp": "2026-04-25 06:56:26,235",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05030000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 695
          },
          {
            "timestamp": "2026-04-25 06:56:26,235",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05030000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 696
          },
          {
            "timestamp": "2026-04-25 06:56:26,235",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02893000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 697
          },
          {
            "timestamp": "2026-04-25 06:56:26,454",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03feb000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 698
          },
          {
            "timestamp": "2026-04-25 06:56:26,469",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fe7000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 699
          },
          {
            "timestamp": "2026-04-25 06:56:26,469",
            "thread_id": "6504",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000220"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 700
          },
          {
            "timestamp": "2026-04-25 06:56:26,657",
            "thread_id": "6504",
            "caller": "0x738d8391",
            "parentcaller": "0x738d83dd",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 701
          },
          {
            "timestamp": "2026-04-25 06:56:26,657",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003b0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 702
          },
          {
            "timestamp": "2026-04-25 06:56:26,657",
            "thread_id": "6504",
            "caller": "0x7727081d",
            "parentcaller": "0x737d3265",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003b0"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x000\\x03\\x00\\x00\\x00\\x00\\x00\\x00*\\x03\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 703
          },
          {
            "timestamp": "2026-04-25 06:56:26,657",
            "thread_id": "6504",
            "caller": "0x77260e58",
            "parentcaller": "0x77260abe",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000394"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x000003b0"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 704
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7727675b",
            "parentcaller": "0x7727669e",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000394"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05040000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095ef38"
              },
              {
                "name": "ViewSize",
                "value": "0x00033000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 705
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "AdvApi32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 706
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76ea0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "AdvApi32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 707
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptAcquireContextA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebfc30"
              }
            ],
            "repeated": 0,
            "id": 708
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptReleaseContext"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf5c0"
              }
            ],
            "repeated": 0,
            "id": 709
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptCreateHash"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebef10"
              }
            ],
            "repeated": 0,
            "id": 710
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptDestroyHash"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf440"
              }
            ],
            "repeated": 0,
            "id": 711
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptHashData"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf130"
              }
            ],
            "repeated": 0,
            "id": 712
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptGetHashParam"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebec70"
              }
            ],
            "repeated": 0,
            "id": 713
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptImportKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf0f0"
              }
            ],
            "repeated": 0,
            "id": 714
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptExportKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf110"
              }
            ],
            "repeated": 0,
            "id": 715
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptGenKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ec46f0"
              }
            ],
            "repeated": 0,
            "id": 716
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptGetKeyParam"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ed4820"
              }
            ],
            "repeated": 0,
            "id": 717
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptDestroyKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf4a0"
              }
            ],
            "repeated": 0,
            "id": 718
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptVerifySignatureA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ed49a0"
              }
            ],
            "repeated": 0,
            "id": 719
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptSignHashA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ed4960"
              }
            ],
            "repeated": 0,
            "id": 720
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptGetProvParam"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ed4840"
              }
            ],
            "repeated": 0,
            "id": 721
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptGetUserKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ed4860"
              }
            ],
            "repeated": 0,
            "id": 722
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CryptEnumProvidersA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ed47c0"
              }
            ],
            "repeated": 0,
            "id": 723
          },
          {
            "timestamp": "2026-04-25 06:56:26,672",
            "thread_id": "6504",
            "caller": "0x7382680d",
            "parentcaller": "0x738269a8",
            "category": "registry",
            "api": "RegOpenKeyExA",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\StrongName"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\StrongName"
              }
            ],
            "repeated": 0,
            "id": 724
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "mscoree.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 725
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x74160000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "mscoree.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 726
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "GetMetaDataInternalInterface"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x74173190"
              }
            ],
            "repeated": 0,
            "id": 727
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetMetaDataInternalInterface_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 728
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "GetMetaDataInternalInterface"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73de0220"
              }
            ],
            "repeated": 0,
            "id": 729
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              },
              {
                "name": "FunctionName",
                "value": "GetMetaDataInternalInterface"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x737e7f3b"
              }
            ],
            "repeated": 0,
            "id": 730
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x77270c75",
            "parentcaller": "0x737e72ac",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05040000"
              },
              {
                "name": "RegionSize",
                "value": "0x00033000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 731
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x738b3dfd",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000394"
              }
            ],
            "repeated": 0,
            "id": 732
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x738b3e09",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003b0"
              }
            ],
            "repeated": 0,
            "id": 733
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x772627d9",
            "parentcaller": "0x77262732",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 734
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x772627d9",
            "parentcaller": "0x77262732",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              },
              {
                "name": "Milliseconds",
                "value": "3000"
              }
            ],
            "repeated": 0,
            "id": 735
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x77265900",
            "parentcaller": "0x73871083",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000024c"
              }
            ],
            "repeated": 0,
            "id": 736
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Fusion\\PublisherPolicy\\Default"
              },
              {
                "name": "Handle",
                "value": "0x00000394"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\PublisherPolicy\\Default"
              }
            ],
            "repeated": 0,
            "id": 737
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x73874e9e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000394"
              },
              {
                "name": "ValueName",
                "value": "Latest"
              },
              {
                "name": "Data",
                "value": "5"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\Latest"
              }
            ],
            "repeated": 0,
            "id": 738
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ac"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\pubpol5.dat"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 739
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000394"
              },
              {
                "name": "ValueName",
                "value": "index5"
              },
              {
                "name": "Data",
                "value": "\\x1f"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\index5"
              }
            ],
            "repeated": 0,
            "id": 740
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x73874f8b",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000394"
              },
              {
                "name": "ValueName",
                "value": "LegacyPolicyTimeStamp"
              },
              {
                "name": "Data",
                "value": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\LegacyPolicyTimeStamp"
              }
            ],
            "repeated": 0,
            "id": 741
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x77277bae",
            "parentcaller": "0x738b0d86",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC\\PublisherPolicy.tme"
              }
            ],
            "repeated": 0,
            "id": 742
          },
          {
            "timestamp": "2026-04-25 06:56:26,860",
            "thread_id": "6504",
            "caller": "0x77277bae",
            "parentcaller": "0x738b0d86",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              }
            ],
            "repeated": 0,
            "id": 743
          },
          {
            "timestamp": "2026-04-25 06:56:26,876",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003a8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 744
          },
          {
            "timestamp": "2026-04-25 06:56:26,876",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 745
          },
          {
            "timestamp": "2026-04-25 06:56:26,876",
            "thread_id": "6504",
            "caller": "0x7726249c",
            "parentcaller": "0x738751e0",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003a8"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "<?xml version=\"1.0\" encoding=\"UTF-8\"?><!--\r\n    Please refer to machine.config.comments for a description and\r\n    the default values of each configuration section.\r\n\r\n    For a full documentation of the schema please refer to\r\n    http://go.microsoft.com/"
              },
              {
                "name": "Length",
                "value": "4095"
              }
            ],
            "repeated": 0,
            "id": 746
          },
          {
            "timestamp": "2026-04-25 06:56:26,876",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c82000"
              },
              {
                "name": "RegionSize",
                "value": "0x00005000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 747
          },
          {
            "timestamp": "2026-04-25 06:56:26,876",
            "thread_id": "6504",
            "caller": "0x7726249c",
            "parentcaller": "0x738751e0",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003a8"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "7a5c561934e089\">\r\n            <section name=\"schemaImporterExtensions\" type=\"System.Xml.Serialization.Configuration.SchemaImporterExtensionsSection, System.Xml, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\"/>\r\n            <section name"
              },
              {
                "name": "Length",
                "value": "18712"
              }
            ],
            "repeated": 0,
            "id": 748
          },
          {
            "timestamp": "2026-04-25 06:56:26,876",
            "thread_id": "6504",
            "caller": "0x7726269a",
            "parentcaller": "0x73875e06",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 749
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Windows.Forms__b77a5c561934e089"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Windows.Forms__b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 750
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\61e7e666\\c991064"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064"
              }
            ],
            "repeated": 0,
            "id": 751
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x737ddd78",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "Name",
                "value": "e"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e"
              }
            ],
            "repeated": 0,
            "id": 752
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737e1a80",
            "parentcaller": "0x737ddde9",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "Name",
                "value": ""
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\"
              }
            ],
            "repeated": 0,
            "id": 753
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737dde65",
            "parentcaller": "0x737dded6",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 754
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\61e7e666\\c991064\\e"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e"
              }
            ],
            "repeated": 0,
            "id": 755
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Windows.Forms,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 756
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ConfigMask"
              },
              {
                "name": "Data",
                "value": "4361"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigMask"
              }
            ],
            "repeated": 0,
            "id": 757
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ConfigString"
              },
              {
                "name": "Data",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigString"
              }
            ],
            "repeated": 0,
            "id": 758
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "MVID"
              },
              {
                "name": "Data",
                "value": "\\x19N\\x1e\\x92\\xbf\\xaeS\\x96\\x08e\\x18\\xc2\\xec\n\\x0ft"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MVID"
              }
            ],
            "repeated": 0,
            "id": 759
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737eb7d1",
            "parentcaller": "0x737eb8c2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 760
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\61e7e666\\c991064\\e"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e"
              }
            ],
            "repeated": 0,
            "id": 761
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "EvalationData"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\EvalationData"
              }
            ],
            "repeated": 0,
            "id": 762
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\Status"
              }
            ],
            "repeated": 0,
            "id": 763
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ILDependencies"
              },
              {
                "name": "Data",
                "value": "@\\xce]G\\xb6\\xf9\\x10\\x19\\x02\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00W\\x8d\\xab\\x19t&\\xa3.\\x07\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00P\\xac\\xd6-\\xb7\\xf8\\xf1%\\x03\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xd8\\xd4KB\\xd5\\x04\\xc5\\x0c\\x06\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00~L\\xc0AT\\xf5Wz\\x1d\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xc5Y\\xed<\\x00\\xa2\\x0bb\\x0e\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00d\\x10\\x99\\x0cX\\xb0\\xeb\\x7f\\x1e\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ILDependencies"
              }
            ],
            "repeated": 0,
            "id": 764
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "NIDependencies"
              },
              {
                "name": "Data",
                "value": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O|\\xbc0O\\xfeP?\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xa0\\x06\\xca<\\xc0\\xd4\\xc7m\\x0f\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\NIDependencies"
              }
            ],
            "repeated": 0,
            "id": 765
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "MissingDependencies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MissingDependencies"
              }
            ],
            "repeated": 0,
            "id": 766
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737eb7d1",
            "parentcaller": "0x737eb8c2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 767
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\475dce40\\1910f9b6\\2"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2"
              }
            ],
            "repeated": 0,
            "id": 768
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Security,2.0.0.0,,b03f5f7f11d50a3a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 769
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Status"
              }
            ],
            "repeated": 0,
            "id": 770
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Modules"
              }
            ],
            "repeated": 0,
            "id": 771
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "\\x08\\x03VdL\\xe0}B\\xb3\\x80\\x140i\\xbf^\\xfcT0=\\xdb\\xb5\\x9b\\x9b[1\\xba\\xbe\\xf8I\\x1e\n\\x06G\\xa7\\xbf "
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\SIG"
              }
            ],
            "repeated": 0,
            "id": 772
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\xa3k\\xc9@\\x07\\xac\\xdc\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 773
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 774
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\19ab8d57\\2ea32674\\7"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7"
              }
            ],
            "repeated": 0,
            "id": 775
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Xml,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 776
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Status"
              }
            ],
            "repeated": 0,
            "id": 777
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Modules"
              }
            ],
            "repeated": 0,
            "id": 778
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "\\xb2\\x1aNYhyhC\\xa1\\xe5\\x96\\xe9\\x9a\\xf9@\\xad\\x19-\\x99{\\x90v\\xc4\\xa3+&d\\x93s{\\x8e\\xce\\x92\\x18\\xc5\\xc6"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\SIG"
              }
            ],
            "repeated": 0,
            "id": 779
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 780
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 781
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\2dd6ac50\\25f1f8b7\\3"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3"
              }
            ],
            "repeated": 0,
            "id": 782
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "Accessibility,2.0.0.0,,b03f5f7f11d50a3a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 783
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Status"
              }
            ],
            "repeated": 0,
            "id": 784
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Modules"
              }
            ],
            "repeated": 0,
            "id": 785
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "z\\xb1\\xaa^\\x82\\x82\\x9bJ\\x84\\x94\\xe5%\\x92\\xf5P\r\\xd2\\xaf\\x11Z\\xf2&\\x19R\\x02V\\x821_\\\\xabW\\xeb\\xe8\\xb4\\xef"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\SIG"
              }
            ],
            "repeated": 0,
            "id": 786
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 787
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 788
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\424bd4d8\\cc504d5\\6"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6"
              }
            ],
            "repeated": 0,
            "id": 789
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Configuration,2.0.0.0,,b03f5f7f11d50a3a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 790
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Status"
              }
            ],
            "repeated": 0,
            "id": 791
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Modules"
              }
            ],
            "repeated": 0,
            "id": 792
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": ";\\xf2\\x93\\x1d\\xca\\xffYI\\xab\\xdc&X\\x07\\xe4$-!M\\xd0D\\x87\\xd2\\xcbu\\xd7)\\x06\\xd2\\xf2\\x1b\\x07\n{\\xefi\\xab"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\SIG"
              }
            ],
            "repeated": 0,
            "id": 793
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "Zk\\xb2'\\x07\\xac\\xdc\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 794
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 795
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\41c04c7e\\7a57f554\\1d"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d"
              }
            ],
            "repeated": 0,
            "id": 796
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 797
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Status"
              }
            ],
            "repeated": 0,
            "id": 798
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Modules"
              }
            ],
            "repeated": 0,
            "id": 799
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "P\\xd0O\\xcbR]\\x90@\\x85\\x86M\\x87\\x82\r\\xa8\\xdd~\\x17\\xf4\\xe2\\x84\\xca\\x8c\\xfd-\\xacs\\xce\\xf7 \\xc3/\\xb3\\xcft\\xbf"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\SIG"
              }
            ],
            "repeated": 0,
            "id": 800
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 801
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 802
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\3ced59c5\\620ba200\\e"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e"
              }
            ],
            "repeated": 0,
            "id": 803
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Deployment,2.0.0.0,,b03f5f7f11d50a3a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 804
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Status"
              }
            ],
            "repeated": 0,
            "id": 805
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Modules"
              }
            ],
            "repeated": 0,
            "id": 806
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "\\xe1\\x8a\\xf5\\x0e\\xe2q\\x8bN\\x97\nB#\\x17\\x8a\\xe6\\xf3\\xe4i\\x1a\\xeeJVa\\\\xcb\\x0ff)\\x08UQ\\x86\\x80E\\x08\\x1a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\SIG"
              }
            ],
            "repeated": 0,
            "id": 807
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 808
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 809
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\c991064\\7febb058\\1e"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e"
              }
            ],
            "repeated": 0,
            "id": 810
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Windows.Forms,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 811
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Status"
              }
            ],
            "repeated": 0,
            "id": 812
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Modules"
              }
            ],
            "repeated": 0,
            "id": 813
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "\\x84\\xda\\xb9\\xe2\\xe1\\5I\\x8c\\xe5a\\xb1\\xb8\\x91\\xd5\\xf7\\xeeKz\\x06#R\\x17\\xc9\\xbf0\\xed\\xbb\\x91p\\x9a#Zk@\\xd5"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\SIG"
              }
            ],
            "repeated": 0,
            "id": 814
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 815
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 816
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\30bc7c4f\\3f50fe4f\\8"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8"
              }
            ],
            "repeated": 0,
            "id": 817
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 818
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ConfigMask"
              },
              {
                "name": "Data",
                "value": "4361"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigMask"
              }
            ],
            "repeated": 0,
            "id": 819
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ConfigString"
              },
              {
                "name": "Data",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigString"
              }
            ],
            "repeated": 0,
            "id": 820
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "MVID"
              },
              {
                "name": "Data",
                "value": "\\xc6\r\\xd1\\xee\\x84;\\xa8\\xff\\x9e\\xe7\\xed\\xcdc\\x029;"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MVID"
              }
            ],
            "repeated": 0,
            "id": 821
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "EvalationData"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\EvalationData"
              }
            ],
            "repeated": 0,
            "id": 822
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\Status"
              }
            ],
            "repeated": 0,
            "id": 823
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ILDependencies"
              },
              {
                "name": "Data",
                "value": "\\xd8\\xd4KB\\xd5\\x04\\xc5\\x0c\\x06\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00W\\x8d\\xab\\x19t&\\xa3.\\x07\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O\\xfeP?\\xe6\\xad\\xb2G\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ILDependencies"
              }
            ],
            "repeated": 0,
            "id": 824
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "NIDependencies"
              },
              {
                "name": "Data",
                "value": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\NIDependencies"
              }
            ],
            "repeated": 0,
            "id": 825
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "MissingDependencies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MissingDependencies"
              }
            ],
            "repeated": 0,
            "id": 826
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737eb7d1",
            "parentcaller": "0x737eb8c2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 827
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\3f50fe4f\\47b2ade6\\8"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8"
              }
            ],
            "repeated": 0,
            "id": 828
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 829
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Status"
              }
            ],
            "repeated": 0,
            "id": 830
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Modules"
              }
            ],
            "repeated": 0,
            "id": 831
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "\\xd40\\\\x82\\xcf\\xa4LF\\xb7\\xeb\\xb8\\x14XT\\xd1\\xf81\\x82\\x8d\\xfa\\x12E\\x8d}\\x7f\\x90'\\xf5\\xa5\\x82\\xdb\\x0c\\x14c\\x12\\x1a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\SIG"
              }
            ],
            "repeated": 0,
            "id": 832
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 833
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 834
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\3cca06a0\\6dc7d4c0\\f"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f"
              }
            ],
            "repeated": 0,
            "id": 835
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Drawing,2.0.0.0,,b03f5f7f11d50a3a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 836
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ConfigMask"
              },
              {
                "name": "Data",
                "value": "4361"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigMask"
              }
            ],
            "repeated": 0,
            "id": 837
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ConfigString"
              },
              {
                "name": "Data",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigString"
              }
            ],
            "repeated": 0,
            "id": 838
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "MVID"
              },
              {
                "name": "Data",
                "value": "\\xa0=\\xd8\\x87\\x19)\\x95\\h\\x022h,\\x94d\\xa0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MVID"
              }
            ],
            "repeated": 0,
            "id": 839
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "EvalationData"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\EvalationData"
              }
            ],
            "repeated": 0,
            "id": 840
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\Status"
              }
            ],
            "repeated": 0,
            "id": 841
          },
          {
            "timestamp": "2026-04-25 06:56:26,907",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "ILDependencies"
              },
              {
                "name": "Data",
                "value": "\\xc0\\xd4\\xc7m\\x16\\x96\\x94$\\x10\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ILDependencies"
              }
            ],
            "repeated": 0,
            "id": 842
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "NIDependencies"
              },
              {
                "name": "Data",
                "value": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O|\\xbc0O\\xfeP?\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\NIDependencies"
              }
            ],
            "repeated": 0,
            "id": 843
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "MissingDependencies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MissingDependencies"
              }
            ],
            "repeated": 0,
            "id": 844
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737eb7d1",
            "parentcaller": "0x737eb8c2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 845
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\6dc7d4c0\\24949616\\10"
              },
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10"
              }
            ],
            "repeated": 0,
            "id": 846
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Drawing,2.0.0.0,,b03f5f7f11d50a3a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 847
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Status"
              }
            ],
            "repeated": 0,
            "id": 848
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Modules"
              }
            ],
            "repeated": 0,
            "id": 849
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "\\x7fX\\xbb\\xfa\\x0e\\xf2\\xcbD\\x91\\xf4^\\x19\\xf6\r\r\\x0c\\xab\\x0eq\\xfcgB\\x12\\xe3\\xe8\\xe5\\x99Q\\x80\\xb8\\x0bu\\xdc\\x16\\x14?"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\SIG"
              }
            ],
            "repeated": 0,
            "id": 850
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x737eb3c2",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 851
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x73863118",
            "parentcaller": "0x73862e31",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003a8"
              }
            ],
            "repeated": 0,
            "id": 852
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL"
              }
            ],
            "repeated": 0,
            "id": 853
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Drawing__b03f5f7f11d50a3a"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Drawing__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 854
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              }
            ],
            "repeated": 0,
            "id": 855
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System__b77a5c561934e089"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System__b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 856
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System,2.0.0.0,,b77a5c561934e089,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System,2.0.0.0,,b77a5c561934e089,MSIL"
              }
            ],
            "repeated": 0,
            "id": 857
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Xml__b77a5c561934e089"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Xml__b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 858
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Xml,2.0.0.0,,b77a5c561934e089,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL"
              }
            ],
            "repeated": 0,
            "id": 859
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Configuration__b03f5f7f11d50a3a"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Configuration__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 860
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              },
              {
                "name": "Data",
                "value": "Zk\\xb2'\\x07\\xac\\xdc\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              }
            ],
            "repeated": 0,
            "id": 861
          },
          {
            "timestamp": "2026-04-25 06:56:26,922",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 862
          },
          {
            "timestamp": "2026-04-25 06:56:27,876",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\c60dd1ee843ba8ff9ee7edcd6302393b\\System.ni"
              },
              {
                "name": "DllBase",
                "value": "0x72430000"
              }
            ],
            "repeated": 0,
            "id": 863
          },
          {
            "timestamp": "2026-04-25 06:56:27,891",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\c60dd1ee843ba8ff9ee7edcd6302393b\\System.ni.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x72430000"
              }
            ],
            "repeated": 0,
            "id": 864
          },
          {
            "timestamp": "2026-04-25 06:56:27,891",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x72430000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\c60dd1ee843ba8ff9ee7edcd6302393b\\System.ni.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 865
          },
          {
            "timestamp": "2026-04-25 06:56:28,110",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 866
          },
          {
            "timestamp": "2026-04-25 06:56:28,235",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\a03dd8871929955c680232682c9464a0\\System.Drawing.ni"
              },
              {
                "name": "DllBase",
                "value": "0x722a0000"
              }
            ],
            "repeated": 0,
            "id": 867
          },
          {
            "timestamp": "2026-04-25 06:56:28,235",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\a03dd8871929955c680232682c9464a0\\System.Drawing.ni.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x722a0000"
              }
            ],
            "repeated": 0,
            "id": 868
          },
          {
            "timestamp": "2026-04-25 06:56:28,235",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x722a0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\a03dd8871929955c680232682c9464a0\\System.Drawing.ni.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 869
          },
          {
            "timestamp": "2026-04-25 06:56:28,282",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Deployment__b03f5f7f11d50a3a"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Deployment__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 870
          },
          {
            "timestamp": "2026-04-25 06:56:28,282",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              }
            ],
            "repeated": 0,
            "id": 871
          },
          {
            "timestamp": "2026-04-25 06:56:28,282",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 872
          },
          {
            "timestamp": "2026-04-25 06:56:28,297",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              }
            ],
            "repeated": 0,
            "id": 873
          },
          {
            "timestamp": "2026-04-25 06:56:28,297",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.Accessibility__b03f5f7f11d50a3a"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.Accessibility__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 874
          },
          {
            "timestamp": "2026-04-25 06:56:28,297",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              }
            ],
            "repeated": 0,
            "id": 875
          },
          {
            "timestamp": "2026-04-25 06:56:28,297",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x737dd9eb",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Security__b03f5f7f11d50a3a"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Security__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 876
          },
          {
            "timestamp": "2026-04-25 06:56:28,297",
            "thread_id": "6504",
            "caller": "0x737d2c2e",
            "parentcaller": "0x7382422f",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              },
              {
                "name": "Data",
                "value": "\\xa3k\\xc9@\\x07\\xac\\xdc\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL"
              }
            ],
            "repeated": 0,
            "id": 877
          },
          {
            "timestamp": "2026-04-25 06:56:28,297",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 878
          },
          {
            "timestamp": "2026-04-25 06:56:28,360",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\194e1e92bfae5396086518c2ec0a0f74\\System.Windows.Forms.ni"
              },
              {
                "name": "DllBase",
                "value": "0x716c0000"
              }
            ],
            "repeated": 0,
            "id": 879
          },
          {
            "timestamp": "2026-04-25 06:56:28,360",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\194e1e92bfae5396086518c2ec0a0f74\\System.Windows.Forms.ni.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x716c0000"
              }
            ],
            "repeated": 0,
            "id": 880
          },
          {
            "timestamp": "2026-04-25 06:56:28,376",
            "thread_id": "6504",
            "caller": "0x77261d96",
            "parentcaller": "0x737f7f86",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x716c0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\194e1e92bfae5396086518c2ec0a0f74\\System.Windows.Forms.ni.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 881
          },
          {
            "timestamp": "2026-04-25 06:56:28,438",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 882
          },
          {
            "timestamp": "2026-04-25 06:56:28,438",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "MSCORWKS.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 883
          },
          {
            "timestamp": "2026-04-25 06:56:28,438",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscorjit.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x0095dd60"
              }
            ],
            "repeated": 0,
            "id": 884
          },
          {
            "timestamp": "2026-04-25 06:56:28,594",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x737dbded",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.INI"
              }
            ],
            "repeated": 0,
            "id": 885
          },
          {
            "timestamp": "2026-04-25 06:56:28,594",
            "thread_id": "6504",
            "caller": "0x7389baa0",
            "parentcaller": "0x7385635b",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Microsoft\\.NETFramework\\Policy\\APTCA"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\.NETFramework\\Policy\\APTCA"
              }
            ],
            "repeated": 0,
            "id": 886
          },
          {
            "timestamp": "2026-04-25 06:56:28,594",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c87000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 887
          },
          {
            "timestamp": "2026-04-25 06:56:28,610",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c88000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 888
          },
          {
            "timestamp": "2026-04-25 06:56:28,610",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c89000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 889
          },
          {
            "timestamp": "2026-04-25 06:56:28,610",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 890
          },
          {
            "timestamp": "2026-04-25 06:56:28,610",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "MSCORWKS.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 891
          },
          {
            "timestamp": "2026-04-25 06:56:28,610",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscorjit.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x0095daec"
              }
            ],
            "repeated": 0,
            "id": 892
          },
          {
            "timestamp": "2026-04-25 06:56:28,657",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x737dbded",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.INI"
              }
            ],
            "repeated": 0,
            "id": 893
          },
          {
            "timestamp": "2026-04-25 06:56:28,688",
            "thread_id": "6504",
            "caller": "0x76ad1e6a",
            "parentcaller": "0x737da7ab",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 894
          },
          {
            "timestamp": "2026-04-25 06:56:28,688",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "MSCORWKS.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 895
          },
          {
            "timestamp": "2026-04-25 06:56:28,688",
            "thread_id": "6504",
            "caller": "0x7726074f",
            "parentcaller": "0x738217cb",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscorjit.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x0095daec"
              }
            ],
            "repeated": 0,
            "id": 896
          },
          {
            "timestamp": "2026-04-25 06:56:28,688",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02894000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 897
          },
          {
            "timestamp": "2026-04-25 06:56:28,688",
            "thread_id": "6504",
            "caller": "0x77264566",
            "parentcaller": "0x737dbded",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Drawing\\2.0.0.0__b03f5f7f11d50a3a\\System.Drawing.INI"
              }
            ],
            "repeated": 0,
            "id": 898
          },
          {
            "timestamp": "2026-04-25 06:56:28,735",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02895000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 899
          },
          {
            "timestamp": "2026-04-25 06:56:28,751",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c8b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 900
          },
          {
            "timestamp": "2026-04-25 06:56:28,766",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c8d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 901
          },
          {
            "timestamp": "2026-04-25 06:56:28,766",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c90000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 902
          },
          {
            "timestamp": "2026-04-25 06:56:28,766",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02896000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 903
          },
          {
            "timestamp": "2026-04-25 06:56:28,782",
            "thread_id": "6504",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0289c000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 904
          },
          {
            "timestamp": "2026-04-25 06:56:28,813",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "__notification__",
            "api": "sysenter",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadIdentifier",
                "value": "6504"
              },
              {
                "name": "Module",
                "value": "KERNEL32.dll"
              },
              {
                "name": "Return Address",
                "value": "0x76ad24ac"
              }
            ],
            "repeated": 0,
            "id": 905
          },
          {
            "timestamp": "2026-04-25 06:56:28,876",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit"
              },
              {
                "name": "DllBase",
                "value": "0x71660000"
              }
            ],
            "repeated": 0,
            "id": 906
          },
          {
            "timestamp": "2026-04-25 06:56:28,938",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x71660000"
              }
            ],
            "repeated": 0,
            "id": 907
          },
          {
            "timestamp": "2026-04-25 06:56:28,938",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x71660000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 908
          },
          {
            "timestamp": "2026-04-25 06:56:28,938",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscorjit.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x71660000"
              },
              {
                "name": "FunctionName",
                "value": "getJit"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x716a93fe"
              }
            ],
            "repeated": 0,
            "id": 909
          },
          {
            "timestamp": "2026-04-25 06:56:28,938",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 910
          },
          {
            "timestamp": "2026-04-25 06:56:28,938",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "IsWow64Process"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad06e0"
              }
            ],
            "repeated": 0,
            "id": 911
          },
          {
            "timestamp": "2026-04-25 06:56:28,985",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05050000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 912
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 913
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 914
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c93000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 915
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\1c22df2f\\4f99a7c9"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\1c22df2f\\4f99a7c9"
              }
            ],
            "repeated": 0,
            "id": 916
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 917
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a"
              }
            ],
            "repeated": 0,
            "id": 918
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              }
            ],
            "repeated": 0,
            "id": 919
          },
          {
            "timestamp": "2026-04-25 06:56:29,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 920
          },
          {
            "timestamp": "2026-04-25 06:56:29,063",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003b4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 921
          },
          {
            "timestamp": "2026-04-25 06:56:29,063",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003a8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x000003b4"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              }
            ],
            "repeated": 0,
            "id": 922
          },
          {
            "timestamp": "2026-04-25 06:56:29,063",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003a8"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07610000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095a950"
              },
              {
                "name": "ViewSize",
                "value": "0x000a6000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 923
          },
          {
            "timestamp": "2026-04-25 06:56:29,063",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003a8"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x076e0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095a950"
              },
              {
                "name": "ViewSize",
                "value": "0x000a6000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 924
          },
          {
            "timestamp": "2026-04-25 06:56:29,063",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07610000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 925
          },
          {
            "timestamp": "2026-04-25 06:56:29,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 926
          },
          {
            "timestamp": "2026-04-25 06:56:29,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.INI"
              }
            ],
            "repeated": 0,
            "id": 927
          },
          {
            "timestamp": "2026-04-25 06:56:29,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05032000"
              },
              {
                "name": "RegionSize",
                "value": "0x00006000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 928
          },
          {
            "timestamp": "2026-04-25 06:56:29,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05038000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 929
          },
          {
            "timestamp": "2026-04-25 06:56:29,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02897000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 930
          },
          {
            "timestamp": "2026-04-25 06:56:29,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05039000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 931
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003bc"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 932
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": false,
            "return": "0xffffffff80000005",
            "pretty_return": "BUFFER_OVERFLOW",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003b4"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "18",
                "pretty_value": "FileAllInformation"
              },
              {
                "name": "FileInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 933
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": false,
            "return": "0xffffffff80000005",
            "pretty_return": "BUFFER_OVERFLOW",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003bc"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "18",
                "pretty_value": "FileAllInformation"
              },
              {
                "name": "FileInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 934
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000002"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x07610000"
              }
            ],
            "repeated": 0,
            "id": 935
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x07610000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000009"
              }
            ],
            "repeated": 0,
            "id": 936
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003bc"
              }
            ],
            "repeated": 0,
            "id": 937
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c95000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 938
          },
          {
            "timestamp": "2026-04-25 06:56:29,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05070000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 939
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05070000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 940
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0503a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 941
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 942
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070088",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 943
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070088",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05080000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 944
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070088",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05080000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 945
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070088",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 946
          },
          {
            "timestamp": "2026-04-25 06:56:29,110",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070191",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 947
          },
          {
            "timestamp": "2026-04-25 06:56:29,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070191",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 948
          },
          {
            "timestamp": "2026-04-25 06:56:29,266",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 949
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "system",
            "api": "LdrLoadDll",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\VERSION.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 950
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\VERSION.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 951
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "VERSION.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x75460000"
              }
            ],
            "repeated": 0,
            "id": 952
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "VERSION.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75460000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileVersionInfoSizeW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x754615c0"
              }
            ],
            "repeated": 0,
            "id": 953
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "filesystem",
            "api": "GetFileVersionInfoSizeW",
            "status": true,
            "return": "0x000007a4",
            "arguments": [
              {
                "name": "PathName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              }
            ],
            "repeated": 0,
            "id": 954
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "VERSION.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75460000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileVersionInfoW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x754615e0"
              }
            ],
            "repeated": 0,
            "id": 955
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "filesystem",
            "api": "GetFileVersionInfoW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "PathName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll"
              }
            ],
            "repeated": 0,
            "id": 956
          },
          {
            "timestamp": "2026-04-25 06:56:29,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "VERSION.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75460000"
              },
              {
                "name": "FunctionName",
                "value": "VerQueryValueW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75461560"
              }
            ],
            "repeated": 0,
            "id": 957
          },
          {
            "timestamp": "2026-04-25 06:56:29,344",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02898000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 958
          },
          {
            "timestamp": "2026-04-25 06:56:29,360",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c98000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 959
          },
          {
            "timestamp": "2026-04-25 06:56:29,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 960
          },
          {
            "timestamp": "2026-04-25 06:56:29,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 961
          },
          {
            "timestamp": "2026-04-25 06:56:29,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 962
          },
          {
            "timestamp": "2026-04-25 06:56:29,719",
            "thread_id": "6504",
            "caller": "0x050703f6",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x7f350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00050000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 963
          },
          {
            "timestamp": "2026-04-25 06:56:29,719",
            "thread_id": "6504",
            "caller": "0x050703f6",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x7f350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 1,
            "id": 964
          },
          {
            "timestamp": "2026-04-25 06:56:29,782",
            "thread_id": "6504",
            "caller": "0x050703f6",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x7f340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 965
          },
          {
            "timestamp": "2026-04-25 06:56:29,782",
            "thread_id": "6504",
            "caller": "0x050703f6",
            "parentcaller": "0x050702c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x7f340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 966
          },
          {
            "timestamp": "2026-04-25 06:56:29,860",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fda000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 967
          },
          {
            "timestamp": "2026-04-25 06:56:29,876",
            "thread_id": "6504",
            "caller": "0x02882420",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "GetUserDefaultLCID",
            "status": true,
            "return": "0x00000419",
            "arguments": [
              {
                "name": "SystemDefaultLangID",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 968
          },
          {
            "timestamp": "2026-04-25 06:56:29,876",
            "thread_id": "6504",
            "caller": "0x02882420",
            "parentcaller": "0x050703f6",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Globalization\\ru-ru.nlp"
              }
            ],
            "repeated": 0,
            "id": 969
          },
          {
            "timestamp": "2026-04-25 06:56:29,876",
            "thread_id": "6504",
            "caller": "0x02882420",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 970
          },
          {
            "timestamp": "2026-04-25 06:56:29,876",
            "thread_id": "6504",
            "caller": "0x02882420",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetUserDefaultUILanguage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad1f60"
              }
            ],
            "repeated": 0,
            "id": 971
          },
          {
            "timestamp": "2026-04-25 06:56:30,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 972
          },
          {
            "timestamp": "2026-04-25 06:56:30,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ntdll.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 973
          },
          {
            "timestamp": "2026-04-25 06:56:30,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x77e40000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "ntdll.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 974
          },
          {
            "timestamp": "2026-04-25 06:56:30,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtQuerySystemInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb2df0"
              }
            ],
            "repeated": 0,
            "id": 975
          },
          {
            "timestamp": "2026-04-25 06:56:30,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "206"
              }
            ],
            "repeated": 0,
            "id": 976
          },
          {
            "timestamp": "2026-04-25 06:56:30,094",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 977
          },
          {
            "timestamp": "2026-04-25 06:56:30,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "user32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x75d10000"
              }
            ],
            "repeated": 0,
            "id": 978
          },
          {
            "timestamp": "2026-04-25 06:56:30,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x75d10000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "user32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 979
          },
          {
            "timestamp": "2026-04-25 06:56:30,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterWindowMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 980
          },
          {
            "timestamp": "2026-04-25 06:56:30,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterWindowMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4f550"
              }
            ],
            "repeated": 0,
            "id": 981
          },
          {
            "timestamp": "2026-04-25 06:56:30,172",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetSystemMetrics"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d44920"
              }
            ],
            "repeated": 0,
            "id": 982
          },
          {
            "timestamp": "2026-04-25 06:56:30,188",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fca000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 983
          },
          {
            "timestamp": "2026-04-25 06:56:30,188",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fc7000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 984
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "AdjustWindowRectEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3d860"
              }
            ],
            "repeated": 0,
            "id": 985
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentProcess"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2e80"
              }
            ],
            "repeated": 0,
            "id": 986
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentThread"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ace7b0"
              }
            ],
            "repeated": 0,
            "id": 987
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "DuplicateHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2ef0"
              }
            ],
            "repeated": 0,
            "id": 988
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x0288a58c",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "NtDuplicateObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SourceProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "SourceHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "TargetProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "TargetHandle",
                "value": "0x000003c4"
              },
              {
                "name": "Options",
                "value": "0x00000002"
              }
            ],
            "repeated": 0,
            "id": 989
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentThreadId"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acdf10"
              }
            ],
            "repeated": 0,
            "id": 990
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fc2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 991
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "lstrlen"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0440"
              }
            ],
            "repeated": 0,
            "id": 992
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "lstrlenW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ace0b0"
              }
            ],
            "repeated": 0,
            "id": 993
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetModuleHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 994
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetModuleHandleW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0e50"
              }
            ],
            "repeated": 0,
            "id": 995
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x0288a2ee",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "user32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              }
            ],
            "repeated": 0,
            "id": 996
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcAddress"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acf550"
              }
            ],
            "repeated": 0,
            "id": 997
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x0288a718",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "DefWindowProcW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ec7fa0"
              }
            ],
            "repeated": 0,
            "id": 998
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "gdi32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a80000"
              }
            ],
            "repeated": 0,
            "id": 999
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76a80000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "gdi32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1000
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76a80000"
              },
              {
                "name": "FunctionName",
                "value": "GetStockObject"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76a85e50"
              }
            ],
            "repeated": 0,
            "id": 1001
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x050705d6",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "GetUserDefaultLCID",
            "status": true,
            "return": "0x00000419",
            "arguments": [
              {
                "name": "SystemDefaultLangID",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 2,
            "id": 1002
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterClass"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1003
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterClassW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3f1d0"
              }
            ],
            "repeated": 0,
            "id": 1004
          },
          {
            "timestamp": "2026-04-25 06:56:30,219",
            "thread_id": "6504",
            "caller": "0x0288a10e",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "CoTaskMemAlloc"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77c57f90"
              }
            ],
            "repeated": 0,
            "id": 1005
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x0288a129",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "CoTaskMemFree"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77c583b0"
              }
            ],
            "repeated": 0,
            "id": 1006
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "CreateWindowEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1007
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "CreateWindowExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3f220"
              }
            ],
            "repeated": 0,
            "id": 1008
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SetWindowLong"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1009
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SetWindowLongW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d45420"
              }
            ],
            "repeated": 0,
            "id": 1010
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowLong"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1011
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowLongW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d48510"
              }
            ],
            "repeated": 0,
            "id": 1012
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fe2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1013
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "advapi32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ea0000"
              }
            ],
            "repeated": 0,
            "id": 1014
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76ea0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "advapi32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1015
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegCloseKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebeb20"
              }
            ],
            "repeated": 0,
            "id": 1016
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegOpenKeyEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1017
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegOpenKeyExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe9b0"
              }
            ],
            "repeated": 0,
            "id": 1018
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x0288aab3",
            "parentcaller": "0x04fe08ec",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x000003c8"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 1019
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1020
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe8e0"
              }
            ],
            "repeated": 0,
            "id": 1021
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x0288abb6",
            "parentcaller": "0x04fe08ec",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c8"
              },
              {
                "name": "ValueName",
                "value": "DbgJITDebugLaunchSetting"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgJITDebugLaunchSetting"
              }
            ],
            "repeated": 0,
            "id": 1022
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x0288abb6",
            "parentcaller": "0x04fe08ec",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c8"
              },
              {
                "name": "ValueName",
                "value": "DbgManagedDebugger"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgManagedDebugger"
              }
            ],
            "repeated": 0,
            "id": 1023
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c8"
              }
            ],
            "repeated": 0,
            "id": 1024
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SetWindowLong"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1025
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SetWindowLongW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d45420"
              }
            ],
            "repeated": 0,
            "id": 1026
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "CallWindowProc"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1027
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "CallWindowProcW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d453f0"
              }
            ],
            "repeated": 0,
            "id": 1028
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetClientRect"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d44cc0"
              }
            ],
            "repeated": 0,
            "id": 1029
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowRect"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d44a40"
              }
            ],
            "repeated": 0,
            "id": 1030
          },
          {
            "timestamp": "2026-04-25 06:56:30,235",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050705d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetParent"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d47310"
              }
            ],
            "repeated": 0,
            "id": 1031
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LdrLoadDll",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\uxtheme.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1032
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\uxtheme.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 1033
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "uxtheme.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x745d0000"
              }
            ],
            "repeated": 0,
            "id": 1034
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x745d0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "uxtheme.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1035
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "uxtheme.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x745d0000"
              },
              {
                "name": "FunctionName",
                "value": "IsAppThemed"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x745fc880"
              }
            ],
            "repeated": 0,
            "id": 1036
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "uxtheme.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x745d0000"
              },
              {
                "name": "FunctionName",
                "value": "IsAppThemedW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1037
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtOpenSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000004"
              },
              {
                "name": "ObjectAttributes",
                "value": "\\Sessions\\1\\Windows\\ThemeSection"
              }
            ],
            "repeated": 0,
            "id": 1038
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c8"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095e684"
              },
              {
                "name": "ViewSize",
                "value": "0x00001000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1039
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1040
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c8"
              }
            ],
            "repeated": 0,
            "id": 1041
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "misc",
            "api": "SystemParametersInfoW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Action",
                "value": "0x00000042"
              },
              {
                "name": "uiParam",
                "value": "0x0000000c"
              }
            ],
            "repeated": 0,
            "id": 1042
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtOpenSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000004"
              },
              {
                "name": "ObjectAttributes",
                "value": "\\Sessions\\1\\Windows\\ThemeSection"
              }
            ],
            "repeated": 0,
            "id": 1043
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c8"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095e684"
              },
              {
                "name": "ViewSize",
                "value": "0x00001000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1044
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05060000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1045
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x05070623",
            "parentcaller": "0x050703f6",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c8"
              }
            ],
            "repeated": 0,
            "id": 1046
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateActCtx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1047
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateActCtxA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76b08dc0"
              }
            ],
            "repeated": 0,
            "id": 1048
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070623",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0288b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1049
          },
          {
            "timestamp": "2026-04-25 06:56:30,297",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003c8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x001200a9",
                "pretty_value": "FILE_GENERIC_READ|FILE_GENERIC_EXECUTE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1050
          },
          {
            "timestamp": "2026-04-25 06:56:30,344",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000004",
                "pretty_value": "SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x000003c8"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll"
              }
            ],
            "repeated": 0,
            "id": 1051
          },
          {
            "timestamp": "2026-04-25 06:56:30,344",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c0"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07790000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x004ce000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1052
          },
          {
            "timestamp": "2026-04-25 06:56:30,344",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003bc"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020019",
                "pretty_value": "KEY_READ"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\SideBySide"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\SideBySide"
              }
            ],
            "repeated": 0,
            "id": 1053
          },
          {
            "timestamp": "2026-04-25 06:56:30,344",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003bc"
              },
              {
                "name": "ValueName",
                "value": "PreferExternalManifest"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\SideBySide\\PreferExternalManifest"
              }
            ],
            "repeated": 0,
            "id": 1054
          },
          {
            "timestamp": "2026-04-25 06:56:30,344",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003bc"
              }
            ],
            "repeated": 0,
            "id": 1055
          },
          {
            "timestamp": "2026-04-25 06:56:30,391",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "__notification__",
            "api": "sysenter",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadIdentifier",
                "value": "6504"
              },
              {
                "name": "Module",
                "value": "KERNEL32.dll"
              },
              {
                "name": "Return Address",
                "value": "0x76ad24ac"
              }
            ],
            "repeated": 0,
            "id": 1056
          },
          {
            "timestamp": "2026-04-25 06:56:30,407",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c8"
              }
            ],
            "repeated": 0,
            "id": 1057
          },
          {
            "timestamp": "2026-04-25 06:56:30,407",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c0"
              }
            ],
            "repeated": 0,
            "id": 1058
          },
          {
            "timestamp": "2026-04-25 06:56:30,407",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070623",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07790000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              }
            ],
            "repeated": 0,
            "id": 1059
          },
          {
            "timestamp": "2026-04-25 06:56:30,501",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentActCtx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ae3460"
              }
            ],
            "repeated": 0,
            "id": 1060
          },
          {
            "timestamp": "2026-04-25 06:56:30,501",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "ActivateActCtx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0ac0"
              }
            ],
            "repeated": 0,
            "id": 1061
          },
          {
            "timestamp": "2026-04-25 06:56:30,501",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtOpenSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d"
              },
              {
                "name": "ObjectAttributes",
                "value": "MSCTF.dll"
              }
            ],
            "repeated": 0,
            "id": 1062
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003c0"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76ba0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x000d4000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000080",
                "pretty_value": "PAGE_EXECUTE_WRITECOPY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1063
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76c68000"
              },
              {
                "name": "ModuleName",
                "value": "MSCTF.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1064
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1065
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1066
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76c64000"
              },
              {
                "name": "ModuleName",
                "value": "MSCTF.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1067
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c0"
              }
            ],
            "repeated": 0,
            "id": 1068
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76c64000"
              },
              {
                "name": "ModuleName",
                "value": "MSCTF.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1069
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtSetInformationProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessInformationClass",
                "value": "35"
              },
              {
                "name": "ProcessInformation",
                "value": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x07\\x00\\x00\\x00\t\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1070
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "DDRAW.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 1071
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D8.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1072
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D9.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 1073
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "misc",
            "api": "RtlDosPathNameToNtPathName_U",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DosFileName",
                "value": "C:\\Windows\\System32\\MSCTF.dll"
              }
            ],
            "repeated": 0,
            "id": 1074
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003c0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020000",
                "pretty_value": "READ_CONTROL"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\msctf.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1075
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003c0"
              }
            ],
            "repeated": 0,
            "id": 1076
          },
          {
            "timestamp": "2026-04-25 06:56:30,516",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\MSCTF"
              },
              {
                "name": "DllBase",
                "value": "0x76ba0000"
              }
            ],
            "repeated": 0,
            "id": 1077
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x774fd000"
              },
              {
                "name": "ModuleName",
                "value": "IMM32.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1078
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x774fd000"
              },
              {
                "name": "ModuleName",
                "value": "IMM32.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1079
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003cc"
              }
            ],
            "repeated": 0,
            "id": 1080
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d0"
              }
            ],
            "repeated": 0,
            "id": 1081
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x774fd000"
              },
              {
                "name": "ModuleName",
                "value": "IMM32.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1082
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x774fd000"
              },
              {
                "name": "ModuleName",
                "value": "IMM32.DLL"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1083
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1084
          },
          {
            "timestamp": "2026-04-25 06:56:30,563",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1085
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtOpenSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003d0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000004"
              },
              {
                "name": "ObjectAttributes",
                "value": "\\Sessions\\1\\Windows\\ThemeSection"
              }
            ],
            "repeated": 0,
            "id": 1086
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003d0"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05080000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095d9b4"
              },
              {
                "name": "ViewSize",
                "value": "0x00001000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1087
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtOpenSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003cc"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000004"
              },
              {
                "name": "ObjectAttributes",
                "value": "\\Windows\\Theme3753190323"
              }
            ],
            "repeated": 0,
            "id": 1088
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtOpenSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003bc"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000004"
              },
              {
                "name": "ObjectAttributes",
                "value": "\\Sessions\\1\\Windows\\Theme4068553709"
              }
            ],
            "repeated": 0,
            "id": 1089
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05080000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1090
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d0"
              }
            ],
            "repeated": 0,
            "id": 1091
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003cc"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07790000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095e040"
              },
              {
                "name": "ViewSize",
                "value": "0x000e2000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1092
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003bc"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05080000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095e040"
              },
              {
                "name": "ViewSize",
                "value": "0x00004000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1093
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 1094
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlRegisterFeatureConfigurationChangeNotification"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e724f0"
              }
            ],
            "repeated": 0,
            "id": 1095
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtQueryWnfStateData"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb40c0"
              }
            ],
            "repeated": 0,
            "id": 1096
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlSubscribeWnfStateChangeNotification"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e70780"
              }
            ],
            "repeated": 0,
            "id": 1097
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlDisownModuleHeapAllocation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eac2a0"
              }
            ],
            "repeated": 0,
            "id": 1098
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlQueryFeatureConfiguration"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ea52e0"
              }
            ],
            "repeated": 0,
            "id": 1099
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlDllShutdownInProgress"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77e9f5a0"
              }
            ],
            "repeated": 0,
            "id": 1100
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x40000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d0"
              },
              {
                "name": "MutexName",
                "value": "Local\\SM0:6484:168:WilStaging_02"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1101
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d0"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 1102
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1103
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d4"
              },
              {
                "name": "Milliseconds",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1104
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d4"
              }
            ],
            "repeated": 0,
            "id": 1105
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d0"
              }
            ],
            "repeated": 1,
            "id": 1106
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowTextLength"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1107
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowTextLengthW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4a4c0"
              }
            ],
            "repeated": 0,
            "id": 1108
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowText"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1109
          },
          {
            "timestamp": "2026-04-25 06:56:30,579",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowTextW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d49d50"
              }
            ],
            "repeated": 0,
            "id": 1110
          },
          {
            "timestamp": "2026-04-25 06:56:30,719",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcessWindowStation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d517d0"
              }
            ],
            "repeated": 0,
            "id": 1111
          },
          {
            "timestamp": "2026-04-25 06:56:30,719",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetUserObjectInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1112
          },
          {
            "timestamp": "2026-04-25 06:56:30,719",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetUserObjectInformationA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3bd50"
              }
            ],
            "repeated": 0,
            "id": 1113
          },
          {
            "timestamp": "2026-04-25 06:56:30,719",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetConsoleCtrlHandler"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3960"
              }
            ],
            "repeated": 0,
            "id": 1114
          },
          {
            "timestamp": "2026-04-25 06:56:30,719",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetConsoleCtrlHandlerW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1115
          },
          {
            "timestamp": "2026-04-25 06:56:30,719",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetModuleHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1116
          },
          {
            "timestamp": "2026-04-25 06:56:30,719",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetModuleHandleW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0e50"
              }
            ],
            "repeated": 0,
            "id": 1117
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetClassInfo"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1118
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetClassInfoW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3df90"
              }
            ],
            "repeated": 0,
            "id": 1119
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterClass"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1120
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterClassW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3f1d0"
              }
            ],
            "repeated": 0,
            "id": 1121
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "CreateWindowEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1122
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "CreateWindowExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3f220"
              }
            ],
            "repeated": 0,
            "id": 1123
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "DefWindowProc"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1124
          },
          {
            "timestamp": "2026-04-25 06:56:30,782",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "DefWindowProcW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ec7fa0"
              }
            ],
            "repeated": 0,
            "id": 1125
          },
          {
            "timestamp": "2026-04-25 06:56:30,985",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fc6000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1126
          },
          {
            "timestamp": "2026-04-25 06:56:30,985",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288a8b3",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1127
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetStartupInfo"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1128
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetStartupInfoW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad1550"
              }
            ],
            "repeated": 0,
            "id": 1129
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowPlacement"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d51950"
              }
            ],
            "repeated": 0,
            "id": 1130
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x076d1000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1131
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x076d2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1132
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003dc"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000009",
                "pretty_value": "KEY_QUERY_VALUE|KEY_ENUMERATE_SUB_KEYS"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              }
            ],
            "repeated": 0,
            "id": 1133
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003dc"
              },
              {
                "name": "ValueName",
                "value": "ResourcePolicies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies"
              }
            ],
            "repeated": 0,
            "id": 1134
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003dc"
              }
            ],
            "repeated": 0,
            "id": 1135
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00008000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1136
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1137
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x076d4000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1138
          },
          {
            "timestamp": "2026-04-25 06:56:31,001",
            "thread_id": "6504",
            "caller": "0x0288a8b3",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x076d5000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1139
          },
          {
            "timestamp": "2026-04-25 06:56:31,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetSystemMetrics"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d44920"
              }
            ],
            "repeated": 0,
            "id": 1140
          },
          {
            "timestamp": "2026-04-25 06:56:31,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetDC"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4e9f0"
              }
            ],
            "repeated": 0,
            "id": 1141
          },
          {
            "timestamp": "2026-04-25 06:56:31,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76a80000"
              },
              {
                "name": "FunctionName",
                "value": "GetDeviceCaps"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76a85ec0"
              }
            ],
            "repeated": 0,
            "id": 1142
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "ReleaseDC"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4e390"
              }
            ],
            "repeated": 0,
            "id": 1143
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "CreateIconFromResourceEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d34850"
              }
            ],
            "repeated": 0,
            "id": 1144
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1145
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1146
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1147
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1148
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1149
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1150
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1151
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1152
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1153
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x0288b78c",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a9f000"
              },
              {
                "name": "ModuleName",
                "value": "GDI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1154
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1155
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d45540"
              }
            ],
            "repeated": 0,
            "id": 1156
          },
          {
            "timestamp": "2026-04-25 06:56:31,141",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetSystemMenu"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d51860"
              }
            ],
            "repeated": 0,
            "id": 1157
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "registry",
            "api": "NtOpenKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020019",
                "pretty_value": "KEY_READ"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\System\\CurrentControlSet\\Control\\StateSeparation\\RedirectionMap\\Keys"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\StateSeparation\\RedirectionMap\\Keys"
              }
            ],
            "repeated": 0,
            "id": 1158
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003d8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020019",
                "pretty_value": "KEY_READ"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\Software\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU"
              }
            ],
            "repeated": 0,
            "id": 1159
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003d8"
              },
              {
                "name": "ValueName",
                "value": "Latest"
              },
              {
                "name": "Type",
                "value": "1",
                "pretty_value": "REG_SZ"
              },
              {
                "name": "Information",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest"
              }
            ],
            "repeated": 0,
            "id": 1160
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d8"
              }
            ],
            "repeated": 0,
            "id": 1161
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003d8"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\USER32.dll.mui"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1162
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003d4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x000003d8"
              },
              {
                "name": "FileName",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\user32.dll.mui"
              }
            ],
            "repeated": 0,
            "id": 1163
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003d4"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x076c0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095dea8"
              },
              {
                "name": "ViewSize",
                "value": "0x00008000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1164
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d4"
              }
            ],
            "repeated": 0,
            "id": 1165
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "EnableMenuItem"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d301c0"
              }
            ],
            "repeated": 0,
            "id": 1166
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1167
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d45540"
              }
            ],
            "repeated": 0,
            "id": 1168
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x04fe08ec",
            "parentcaller": "0x0288b843",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c9a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1169
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SetWindowPos"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d52370"
              }
            ],
            "repeated": 0,
            "id": 1170
          },
          {
            "timestamp": "2026-04-25 06:56:31,157",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RedrawWindow"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d51e90"
              }
            ],
            "repeated": 0,
            "id": 1171
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "ShowWindow"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d523d0"
              }
            ],
            "repeated": 0,
            "id": 1172
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1173
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d45540"
              }
            ],
            "repeated": 0,
            "id": 1174
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowThreadProcessId"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4a660"
              }
            ],
            "repeated": 0,
            "id": 1175
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "PostMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1176
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "PostMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d45490"
              }
            ],
            "repeated": 0,
            "id": 1177
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288bbbb",
            "parentcaller": "0x04fe08ec",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 1178
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ole32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77060000"
              }
            ],
            "repeated": 0,
            "id": 1179
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x77060000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "ole32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1180
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "OleInitialize"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77083a30"
              }
            ],
            "repeated": 0,
            "id": 1181
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288a7be",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000008"
              },
              {
                "name": "TokenHandle",
                "value": "0x000003d4"
              }
            ],
            "repeated": 0,
            "id": 1182
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288a7be",
            "parentcaller": "0x050701a2",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "29"
              },
              {
                "name": "TokenInformation",
                "value": "\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1183
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288a7be",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d4"
              }
            ],
            "repeated": 0,
            "id": 1184
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288a7be",
            "parentcaller": "0x050701a2",
            "category": "synchronization",
            "api": "NtAddAtomEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "AtomName",
                "value": "OleDropTargetInterface"
              },
              {
                "name": "Atom",
                "value": "0x0000c01b"
              }
            ],
            "repeated": 0,
            "id": 1185
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288a7be",
            "parentcaller": "0x050701a2",
            "category": "synchronization",
            "api": "NtAddAtomEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "AtomName",
                "value": "OleDropTargetMarshalHwnd"
              },
              {
                "name": "Atom",
                "value": "0x0000c01c"
              }
            ],
            "repeated": 0,
            "id": 1186
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "CoRegisterMessageFilter"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7708dc80"
              }
            ],
            "repeated": 0,
            "id": 1187
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77122000"
              },
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1188
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77122000"
              },
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1189
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "PeekMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1190
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "PeekMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4b400"
              }
            ],
            "repeated": 0,
            "id": 1191
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "IsWindowUnicode"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d45ac0"
              }
            ],
            "repeated": 0,
            "id": 1192
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4b390"
              }
            ],
            "repeated": 0,
            "id": 1193
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "TranslateMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4a1d0"
              }
            ],
            "repeated": 0,
            "id": 1194
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050701a2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "DispatchMessageW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d456b0"
              }
            ],
            "repeated": 0,
            "id": 1195
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288bdc7",
            "parentcaller": "0x050701a2",
            "category": "misc",
            "api": "ChangeWindowMessageFilter",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "message",
                "value": "49238"
              },
              {
                "name": "dwFlag",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 1196
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0288bdc7",
            "parentcaller": "0x050701a2",
            "category": "misc",
            "api": "ChangeWindowMessageFilter",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "message",
                "value": "49239"
              },
              {
                "name": "dwFlag",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 1197
          },
          {
            "timestamp": "2026-04-25 06:56:31,172",
            "thread_id": "6504",
            "caller": "0x0507066e",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetFocus"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4e960"
              }
            ],
            "repeated": 0,
            "id": 1198
          },
          {
            "timestamp": "2026-04-25 06:56:31,313",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070674",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c9c000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1199
          },
          {
            "timestamp": "2026-04-25 06:56:31,329",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070674",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02899000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1200
          },
          {
            "timestamp": "2026-04-25 06:56:31,360",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070674",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0503b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1201
          },
          {
            "timestamp": "2026-04-25 06:56:31,391",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070790",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetModuleFileName"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1202
          },
          {
            "timestamp": "2026-04-25 06:56:31,391",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070790",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetModuleFileNameW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0900"
              }
            ],
            "repeated": 0,
            "id": 1203
          },
          {
            "timestamp": "2026-04-25 06:56:31,391",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070797",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetCurrentDirectory"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1204
          },
          {
            "timestamp": "2026-04-25 06:56:31,391",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070797",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetCurrentDirectoryW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac8fb0"
              }
            ],
            "repeated": 0,
            "id": 1205
          },
          {
            "timestamp": "2026-04-25 06:56:31,579",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070b2f",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FindResourceEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1206
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070b2f",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "FindResourceExA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acb210"
              }
            ],
            "repeated": 0,
            "id": 1207
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070b2f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0289a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1208
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x0288b3a7",
            "parentcaller": "0x05070b2f",
            "category": "misc",
            "api": "FindResourceExA",
            "status": true,
            "return": "0x005b2080",
            "arguments": [
              {
                "name": "Module",
                "value": "0x00000000"
              },
              {
                "name": "Type",
                "value": "#10"
              },
              {
                "name": "Name",
                "value": "#1"
              },
              {
                "name": "Language",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1209
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070b48",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "LoadResource"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ace840"
              }
            ],
            "repeated": 0,
            "id": 1210
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x0288bfbd",
            "parentcaller": "0x05070b48",
            "category": "misc",
            "api": "LoadResource",
            "status": true,
            "return": "0x005b20a0",
            "arguments": [
              {
                "name": "Module",
                "value": "0x00000000"
              },
              {
                "name": "ResourceInfo",
                "value": "0x005b2080"
              }
            ],
            "repeated": 0,
            "id": 1211
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070b64",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SizeofResource"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0480"
              }
            ],
            "repeated": 0,
            "id": 1212
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x0288bfbd",
            "parentcaller": "0x05070b64",
            "category": "misc",
            "api": "SizeofResource",
            "status": true,
            "return": "0x00015d18",
            "arguments": [
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              },
              {
                "name": "ResourceInfo",
                "value": "0x005b2080"
              }
            ],
            "repeated": 0,
            "id": 1213
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070b7c",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "LockResource"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acf340"
              }
            ],
            "repeated": 0,
            "id": 1214
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x0288a3a6",
            "parentcaller": "0x05070b7c",
            "category": "misc",
            "api": "LockResource",
            "status": true,
            "return": "0x005b20a0",
            "arguments": [
              {
                "name": "ResourceData",
                "value": "0x005b20a0"
              }
            ],
            "repeated": 0,
            "id": 1215
          },
          {
            "timestamp": "2026-04-25 06:56:31,594",
            "thread_id": "6504",
            "caller": "0x05070b93",
            "parentcaller": "0x05070935",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06522000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1216
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtOpenSection",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d"
              },
              {
                "name": "ObjectAttributes",
                "value": "CRYPTSP.dll"
              }
            ],
            "repeated": 0,
            "id": 1217
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\CRYPTSP.dll"
              }
            ],
            "repeated": 0,
            "id": 1218
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\cryptsp.dll"
              }
            ],
            "repeated": 0,
            "id": 1219
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003d4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100021",
                "pretty_value": "FILE_READ_ACCESS|FILE_EXECUTE|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\cryptsp.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1220
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003dc"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0000000d",
                "pretty_value": "SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_EXECUTE"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x000003d4"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\cryptsp.dll"
              }
            ],
            "repeated": 0,
            "id": 1221
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000003dc"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75280000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x00013000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000080",
                "pretty_value": "PAGE_EXECUTE_WRITECOPY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1222
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x75290000"
              },
              {
                "name": "ModuleName",
                "value": "CRYPTSP.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1223
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1224
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1225
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x7528f000"
              },
              {
                "name": "ModuleName",
                "value": "CRYPTSP.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1226
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003dc"
              }
            ],
            "repeated": 0,
            "id": 1227
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d4"
              }
            ],
            "repeated": 0,
            "id": 1228
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x7528f000"
              },
              {
                "name": "ModuleName",
                "value": "CRYPTSP.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1229
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "DDRAW.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 1230
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D8.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1231
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "D3D9.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x00000000"
              }
            ],
            "repeated": 1,
            "id": 1232
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "misc",
            "api": "RtlDosPathNameToNtPathName_U",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DosFileName",
                "value": "C:\\Windows\\SYSTEM32\\CRYPTSP.dll"
              }
            ],
            "repeated": 0,
            "id": 1233
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003d4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020000",
                "pretty_value": "READ_CONTROL"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\cryptsp.dll"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1234
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003d4"
              }
            ],
            "repeated": 0,
            "id": 1235
          },
          {
            "timestamp": "2026-04-25 06:56:31,626",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\CRYPTSP"
              },
              {
                "name": "DllBase",
                "value": "0x75280000"
              }
            ],
            "repeated": 0,
            "id": 1236
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76f14000"
              },
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1237
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x76f14000"
              },
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1238
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\system32\\rsaenh"
              },
              {
                "name": "DllBase",
                "value": "0x74c10000"
              }
            ],
            "repeated": 0,
            "id": 1239
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\rsaenh.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74c10000"
              }
            ],
            "repeated": 0,
            "id": 1240
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptAcquireContextW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Container",
                "value": ""
              },
              {
                "name": "Provider",
                "value": ""
              },
              {
                "name": "Flags",
                "value": "0xf0000000"
              }
            ],
            "repeated": 0,
            "id": 1241
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\bcryptprimitives.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76d80000"
              }
            ],
            "repeated": 0,
            "id": 1242
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1243
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x05070ca2",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1244
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070cb7",
            "category": "system",
            "api": "LdrLoadDll",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\bcrypt.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1245
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070cb7",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\bcrypt.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 1246
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070cb7",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "bcrypt.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76160000"
              }
            ],
            "repeated": 0,
            "id": 1247
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070cb7",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76160000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "bcrypt.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1248
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070cb7",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "bcrypt.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76160000"
              },
              {
                "name": "FunctionName",
                "value": "BCryptGetFipsAlgorithmMode"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76169570"
              }
            ],
            "repeated": 0,
            "id": 1249
          },
          {
            "timestamp": "2026-04-25 06:56:31,641",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070cb7",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07880000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1250
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070cb7",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07880000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1251
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070cb7",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003e4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000001",
                "pretty_value": "KEY_QUERY_VALUE"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy"
              }
            ],
            "repeated": 0,
            "id": 1252
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070cb7",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003e4"
              },
              {
                "name": "ValueName",
                "value": "Enabled"
              },
              {
                "name": "Type",
                "value": "4",
                "pretty_value": "REG_DWORD"
              },
              {
                "name": "Information",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled"
              }
            ],
            "repeated": 0,
            "id": 1253
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070cb7",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003e0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000001",
                "pretty_value": "KEY_QUERY_VALUE"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\System\\CurrentControlSet\\Control\\Lsa"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa"
              }
            ],
            "repeated": 0,
            "id": 1254
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070cb7",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003e0"
              },
              {
                "name": "ValueName",
                "value": "FipsAlgorithmPolicy"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy"
              }
            ],
            "repeated": 0,
            "id": 1255
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070cb7",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003e4"
              },
              {
                "name": "ValueName",
                "value": "MDMEnabled"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled"
              }
            ],
            "repeated": 0,
            "id": 1256
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070cb7",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              }
            ],
            "repeated": 0,
            "id": 1257
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x05070cb7",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e0"
              }
            ],
            "repeated": 0,
            "id": 1258
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1259
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "w\\xda\\x13\\x99S\\x0bWN\\xa060\\xc0\\xc5i\\xc9\\x9d"
              },
              {
                "name": "Length",
                "value": "16"
              }
            ],
            "repeated": 0,
            "id": 1260
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\x00\\x00\\x00\\x01"
              },
              {
                "name": "Length",
                "value": "4"
              }
            ],
            "repeated": 0,
            "id": 1261
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1262
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1263
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\x84k\\x8e\\xe7\\x01\\xc2r\\x00\\xdb\\xea\\xc1~\\xfa\\xc3\\xb4\roEJ,"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1264
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1265
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1266
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1267
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1268
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1269
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1270
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\x1e\\xb2\\x9a\\x83\\xac\\x82\\xd1\\x80\\x0cEZe)s\\x13\\xeb\\xafzJf"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1271
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1272
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1273
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\xd6R\\x1e)r\\x17$\\xfb0\\xe4\\x0fJ\\xf5\\xb7\\x8a\\xe0\\x01\\x1a\\xd0\\x12"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1274
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1275
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1276
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1277
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1278
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1279
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1280
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\x9eMG\\xca[U\\x16\\x90\\xfb\\x94\\xfb\\xf8un\\x98\\xd5\\xb3\\x9b\\xeev"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1281
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1282
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1283
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\xf5\\xeds\\xfa\\x1e\\xf1B\\xb6xJ\\xfa\\xcc\\x0c\\x02\\x14{e\\x9ar\\x02"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1284
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1285
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1286
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1287
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1288
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1289
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1290
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\x00\\xf7\\xd6\\xde\\x81\\xedvJ\\x85\\x81\\xba#\\x87\\x83\\xc3\\xf3*\\xda\\xb5\\xb7"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1291
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1292
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1293
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\x15\\xaa\\xe2E\\xbb\\xf3\\x1fC;\\xe1J\\xcb*\\xf6\\xe54\\xa3\\x9a\\xc8\\x14"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1294
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1295
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1296
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1297
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1298
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1299
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1300
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "E\\xbeA\\x1b\\x08X\\I\\x87dTy[M_\\x9c\\x91u\\x00\\xbd"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1301
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1302
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1303
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\x18\\x04\\xb9TW8\\xe2\\xd8\\x1e\\xfd+\\xf5\\x8eg\\xf6\\x08\\xd9W\\xc7\\xf0"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1304
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1305
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1306
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1307
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1308
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1309
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1310
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "E\\xe8FC\\x129c\\xc9\\xe6\\xab\\x99\\xd7r\\xd8r$\\x1c\\xcf\\xd7\""
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1311
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1312
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1313
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "14\\xaaW\\x04\\x94y\\xe0\\x07\\xbe\\x1e\\xb2&\\xdc\\x86xqRR\\x8d"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1314
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1315
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1316
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1317
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1318
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1319
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1320
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "B\\xbe\\x7fi\\xed\\x86\\xb0\\x0c\\xa1-\\x14\\xe4\\xe7\\xf9\\x14`f\\x19\\xcba"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1321
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1322
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1323
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "1\\x0eDY_\\x0bm/xZ\\x84lA&o\\xf2\\xa7\\x82P\\x05"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1324
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1325
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1326
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1327
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1328
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1329
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1330
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "(\\xc9\\xa3\\x13X\\xcfM\\xe9\\x16b\\xa4\\x98\\xf2\\x8b\n\\xd1}\\x8c \\x19"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1331
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1332
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1333
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "c\\x8aXsD\\x9b\\xaa>J`\\x84{\\x9ek\\x06B_\\xe9\\xf9\\xf1"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1334
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1335
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1336
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1337
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1338
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cc5",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1339
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1340
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "w\\xda\\x13\\x99S\\x0bWN\\xa060\\xc0\\xc5i\\xc9\\x9d"
              },
              {
                "name": "Length",
                "value": "16"
              }
            ],
            "repeated": 0,
            "id": 1341
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\x00\\x00\\x00\\x02"
              },
              {
                "name": "Length",
                "value": "4"
              }
            ],
            "repeated": 0,
            "id": 1342
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1343
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1344
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\x0ef\\xe4\\xbd\\x94e\\xa6\\x91\\x7fhK^*p>I\\xc4V\\xf0\\x19"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1345
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1346
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1347
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1348
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1349
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1350
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1351
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "[\\xb6W@\\xf2\\x96\\x07\\x02h\\xc6R\\xb8`m\\xc0@K\\x00\\xde\\x9a"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1352
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1353
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1354
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\xc8\\xc6P\\x9c,\\x02q\\x15\\x85\\xf8Z\\x87\\x90\\xac\\xf1\\xe4*\\xf7\\xbf\\x87"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1355
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1356
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1357
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1358
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1359
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1360
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1361
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\x81\\x02\\xe7!,\\x0c\\x8cb\\xbe\\x10\\xee8y~V\\x08w\\x7f\\x0bm"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1362
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1363
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1364
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\xc3\\x1c\\xbd\\xb2bI\\xbf\\x8b*t\\xeb\\x8b*\\xf1\\xfa\\xcb\\xedB\\xdd8"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1365
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1366
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1367
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1368
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1369
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1370
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1371
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "(<7\\xc2\\xf2;\\x0b%X%L\\x00uv\\x81+\\xea\\xce\\xd4\\xed"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1372
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1373
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1374
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "c\\xc4jO\\xde\\xf2\\xefC23\\x8f:\\xd8;\\x1d\\x85\\x92\\xc4\\xc3\\x03"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1375
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1376
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1377
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1378
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1379
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1380
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1381
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "e\\xeb\\xa2|r\\xae6\\x8b\\xe4\\xe3Yf\\xb4j\\x7f\\xeb\\x87\\xf7\\x8e\\x16"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1382
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1383
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1384
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\x92\\xad\\x1eF\\x8b\\xf2\\xb3\\x8b[@\\xb3\\x17\\x8eKH\\x9b,*\\xb4\\xc3"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1385
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1386
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1387
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1388
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1389
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1390
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1391
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\xdf\\x83\\x93J_l\\xf8\\xc6<\\x1c\\x8f\\x95\\x96\\x92\\x9e\\xc8\\xbc\\xe4S\\xca"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1392
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1393
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1394
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\xce\\x047\\x8b\\xae\\xc9A\\x92g\\x82\\xab\\x91\\xc87])e;]\\x1c"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1395
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1396
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1397
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1398
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1399
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1400
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1401
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "\\xe3R\\xf2\\x9e1\\xd7\\x8dn\\x0f\\x7f\\x95+\\xf21'\\xae\\x0bA\\xdf["
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1402
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1403
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1404
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "\\xb6y\\x07\\xdce\\xda@}\\xaf\\x97DWy\\xa5\\x16\\x16i\\xe0\\xe5\\xc6"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1405
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1406
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1407
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1408
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1409
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1410
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "A\\xec%\\xafe=ax\\x96\\x00\\x06\\xf6\\xf3_\\xff\\xab666666666666666666666666666666666666666666666666"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1411
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": "Q\\xa8\\xbe\\x1afm\ns\\xa9\\xbf\\x85i\\xed\\xb5\\x1e\\xa1{jb\\xca"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1412
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1413
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "+\\x86O\\xc5\\x0fW\\x0b\\x12\\xfcjl\\x9c\\x995\\x95\\xc1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
              },
              {
                "name": "Length",
                "value": "64"
              }
            ],
            "repeated": 0,
            "id": 1414
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": "K_\\xdcS7A-\\x05\\x94\\x02w\\x9fx\\xf6\\xff\\xb6\\x0c3\\xa1M"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1415
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1416
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1417
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 1418
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1419
          },
          {
            "timestamp": "2026-04-25 06:56:31,657",
            "thread_id": "6504",
            "caller": "0x05070cda",
            "parentcaller": "0x050709e4",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008004",
                "pretty_value": "SHA1"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 1420
          },
          {
            "timestamp": "2026-04-25 06:56:31,672",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x05070ced",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05522000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1421
          },
          {
            "timestamp": "2026-04-25 06:56:31,688",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05071000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1422
          },
          {
            "timestamp": "2026-04-25 06:56:31,688",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050709fb",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fe5000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1423
          },
          {
            "timestamp": "2026-04-25 06:56:31,688",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050709fb",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fe0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1424
          },
          {
            "timestamp": "2026-04-25 06:56:31,704",
            "thread_id": "6504",
            "caller": "0x0507125c",
            "parentcaller": "0x050709fb",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\rsaenh.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74c10000"
              }
            ],
            "repeated": 0,
            "id": 1425
          },
          {
            "timestamp": "2026-04-25 06:56:31,704",
            "thread_id": "6504",
            "caller": "0x0507125c",
            "parentcaller": "0x050709fb",
            "category": "crypto",
            "api": "CryptAcquireContextW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Container",
                "value": ""
              },
              {
                "name": "Provider",
                "value": ""
              },
              {
                "name": "Flags",
                "value": "0xf0000000"
              }
            ],
            "repeated": 0,
            "id": 1426
          },
          {
            "timestamp": "2026-04-25 06:56:31,704",
            "thread_id": "6504",
            "caller": "0x0507125c",
            "parentcaller": "0x050709fb",
            "category": "crypto",
            "api": "CryptImportKey",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "KeyBlob",
                "value": "\\x08\\x02\\x00\\x00\\x01f\\x00\\x00\\x08\\x00\\x00\\x00r \\x18x\\x8c)H\\x97"
              },
              {
                "name": "Flags",
                "value": "0x00000001"
              },
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1427
          },
          {
            "timestamp": "2026-04-25 06:56:31,719",
            "thread_id": "6504",
            "caller": "0x05071268",
            "parentcaller": "0x050709fb",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\rsaenh.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74c10000"
              }
            ],
            "repeated": 0,
            "id": 1428
          },
          {
            "timestamp": "2026-04-25 06:56:31,719",
            "thread_id": "6504",
            "caller": "0x05071268",
            "parentcaller": "0x050709fb",
            "category": "crypto",
            "api": "CryptAcquireContextW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Container",
                "value": ""
              },
              {
                "name": "Provider",
                "value": ""
              },
              {
                "name": "Flags",
                "value": "0xf0000000"
              }
            ],
            "repeated": 0,
            "id": 1429
          },
          {
            "timestamp": "2026-04-25 06:56:31,719",
            "thread_id": "6504",
            "caller": "0x05071268",
            "parentcaller": "0x050709fb",
            "category": "crypto",
            "api": "CryptImportKey",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "KeyBlob",
                "value": "\\x08\\x02\\x00\\x00\\x01f\\x00\\x00\\x08\\x00\\x00\\x00r \\x18x\\x8c)H\\x97"
              },
              {
                "name": "Flags",
                "value": "0x00000001"
              },
              {
                "name": "CryptKey",
                "value": "0x00c61df8"
              },
              {
                "name": "Length",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 1430
          },
          {
            "timestamp": "2026-04-25 06:56:31,719",
            "thread_id": "6504",
            "caller": "0x05070a0e",
            "parentcaller": "0x0507079d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06532000"
              },
              {
                "name": "RegionSize",
                "value": "0x00012000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1431
          },
          {
            "timestamp": "2026-04-25 06:56:31,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07890000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1432
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1433
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1434
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1435
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05072000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1436
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1437
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1438
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1439
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07890000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1440
          },
          {
            "timestamp": "2026-04-25 06:56:31,797",
            "thread_id": "6504",
            "caller": "0x05071311",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c9f000"
              },
              {
                "name": "RegionSize",
                "value": "0x00016000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1441
          },
          {
            "timestamp": "2026-04-25 06:56:31,813",
            "thread_id": "6504",
            "caller": "0x05071311",
            "parentcaller": "0x05070a34",
            "category": "crypto",
            "api": "CryptDecrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61df8"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x01\\xa4\\xd8\\x01\\x00\\xed\\xbd\\x07`\\x1cI\\x96%&/m\\xca{\\x7fJ\\xf5J\\xd7\\xe0t\\xa1\\x08\\x80`\\x13$\\xd8\\x90@\\x10\\xec\\xc1\\x88\\xcd\\xe6\\x92\\xec\\x1diG#)\\xab*\\x81\\xcaeVe]f\\x16@\\xcc\\xed\\x9d\\xbc\\xf7\\xde{\\xef\\xbd\\xf7\\xde{\\xef\\xbd\\xf7\\xba;\\x9dN'\\xf7\\xdf\\xff?\\fd\\x01l\\xf6\\xceJ\\xda\\xc9\\x9e!\\x80\\xaa\\xc8\\x1f?~|\\x1f?\"~\\x8d_\\xe3\\xd7\\xf8\\xf5\\x7f=\\xfa\\xe77\\xfb\\x83\\xfe\\xb6\\x17\\xf7\\xfe\\xe5\\x7f\\xed_\\xfe\\xf6\\xaf\\xf5k\\xbc\\xf85~\\x8d/~\\xeaO\\xfa5~m\\xfa\\xf4\\xd7\\xa1\\xff\\xff\\xdf\\xff\\xf7\\xaf\\xf1k\\xfc]\\xbf\\x86<\\xbf\\xa7\\xfe\\xdc\\xf4\\xfcA\\xf4\\xff\\xdf\\xe4w\\xf9{~\\x93_\\xe3o\\xfb\\xb1\\x7f\\xfew\\xfd\\xbb~\\xcd\\xe7\\xff\\xfc\\xef\\xfaf^4\\xe9\\xaa\\xae.\\xeal\\x91N\\xb3\\xe5\\xb2j\\xd3I\\x9e\\xd6\\xebeZ,\\xd3\\xa7_\\xbeN\\x17\\xd5,\\x1f\\xff\\xc6\\xbfq\\xf2\\xbb)\\x8c\\x97\\xa7\\xbf\\xc6\\xaf\\xf1\\xfc\\xd7\\xfc\\xb5\\x7f\\x8d\\xbf\\xfe\\xde/zc\\xe0\\xfeG"
              },
              {
                "name": "Length",
                "value": "89344"
              },
              {
                "name": "Final",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1442
          },
          {
            "timestamp": "2026-04-25 06:56:31,813",
            "thread_id": "6504",
            "caller": "0x05071311",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06544000"
              },
              {
                "name": "RegionSize",
                "value": "0x00016000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1443
          },
          {
            "timestamp": "2026-04-25 06:56:31,813",
            "thread_id": "6504",
            "caller": "0x05071311",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c9d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00017000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 1444
          },
          {
            "timestamp": "2026-04-25 06:56:31,813",
            "thread_id": "6504",
            "caller": "0x05071311",
            "parentcaller": "0x05070a34",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61df8"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\xc2\\xceg,\\x1b<*\\xae%\\x82\\xd3g+X\\xe4C"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 1445
          },
          {
            "timestamp": "2026-04-25 06:56:31,829",
            "thread_id": "6504",
            "caller": "0x05071469",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0655a000"
              },
              {
                "name": "RegionSize",
                "value": "0x0001d000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1446
          },
          {
            "timestamp": "2026-04-25 06:56:31,876",
            "thread_id": "6504",
            "caller": "0x0507148f",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05532000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1447
          },
          {
            "timestamp": "2026-04-25 06:56:31,876",
            "thread_id": "6504",
            "caller": "0x050716f1",
            "parentcaller": "0x05070a34",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06577000"
              },
              {
                "name": "RegionSize",
                "value": "0x00019000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1448
          },
          {
            "timestamp": "2026-04-25 06:56:31,876",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070adf",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07890000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1449
          },
          {
            "timestamp": "2026-04-25 06:56:31,891",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070adf",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07890000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1450
          },
          {
            "timestamp": "2026-04-25 06:56:31,891",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1451
          },
          {
            "timestamp": "2026-04-25 06:56:31,891",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1452
          },
          {
            "timestamp": "2026-04-25 06:56:31,891",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1453
          },
          {
            "timestamp": "2026-04-25 06:56:31,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1454
          },
          {
            "timestamp": "2026-04-25 06:56:31,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050722b5",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1455
          },
          {
            "timestamp": "2026-04-25 06:56:31,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050722b5",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1456
          },
          {
            "timestamp": "2026-04-25 06:56:32,204",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "misc",
            "api": "HeapCreate",
            "status": true,
            "return": "0x07a40000",
            "arguments": [
              {
                "name": "Options",
                "value": "262144"
              },
              {
                "name": "InitialSize",
                "value": "0x00000000"
              },
              {
                "name": "MaximumSize",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1457
          },
          {
            "timestamp": "2026-04-25 06:56:32,219",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a41000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1458
          },
          {
            "timestamp": "2026-04-25 06:56:32,235",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a42000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1459
          },
          {
            "timestamp": "2026-04-25 06:56:32,251",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a43000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1460
          },
          {
            "timestamp": "2026-04-25 06:56:32,266",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a44000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1461
          },
          {
            "timestamp": "2026-04-25 06:56:32,266",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a46000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1462
          },
          {
            "timestamp": "2026-04-25 06:56:32,266",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003e4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000009",
                "pretty_value": "KEY_QUERY_VALUE|KEY_ENUMERATE_SUB_KEYS"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              }
            ],
            "repeated": 0,
            "id": 1463
          },
          {
            "timestamp": "2026-04-25 06:56:32,266",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x000003e4"
              },
              {
                "name": "ValueName",
                "value": "ResourcePolicies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies"
              }
            ],
            "repeated": 0,
            "id": 1464
          },
          {
            "timestamp": "2026-04-25 06:56:32,266",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              }
            ],
            "repeated": 0,
            "id": 1465
          },
          {
            "timestamp": "2026-04-25 06:56:32,329",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00008000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1466
          },
          {
            "timestamp": "2026-04-25 06:56:32,329",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078a0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1467
          },
          {
            "timestamp": "2026-04-25 06:56:32,391",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a48000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1468
          },
          {
            "timestamp": "2026-04-25 06:56:32,391",
            "thread_id": "6504",
            "caller": "0x050722d4",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a4a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00005000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1469
          },
          {
            "timestamp": "2026-04-25 06:56:32,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1470
          },
          {
            "timestamp": "2026-04-25 06:56:32,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00c9d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00017000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1471
          },
          {
            "timestamp": "2026-04-25 06:56:32,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1472
          },
          {
            "timestamp": "2026-04-25 06:56:32,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1473
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0503c000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1474
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1475
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1476
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072264",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1477
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072490",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1478
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072490",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1479
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507260b",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1480
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507260b",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1481
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072624",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1482
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072624",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1483
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072ca5",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1484
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072ca5",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1485
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1486
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1487
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072d9e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1488
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072d9e",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1489
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072dd9",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1490
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072dd9",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1491
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072e2f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1492
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072e2f",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1493
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072f61",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1494
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072f61",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05073000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1495
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072f61",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1496
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x05072f61",
            "parentcaller": "0x05072e2f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05542000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1497
          },
          {
            "timestamp": "2026-04-25 06:56:32,422",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050726ef",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1498
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050726ef",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1499
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050726ef",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1500
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050726ef",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1501
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050730ba",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1502
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050730ba",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1503
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073193",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1504
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073193",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1505
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507352f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1506
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507352f",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1507
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073539",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1508
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073539",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1509
          },
          {
            "timestamp": "2026-04-25 06:56:32,438",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073544",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1510
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073544",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1511
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073639",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1512
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073639",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1513
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507367b",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1514
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507367b",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1515
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050736eb",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1516
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050736eb",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1517
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050737bc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1518
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050737bc",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1519
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507387d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1520
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507387d",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1521
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072836",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1522
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072836",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1523
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072886",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1524
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072886",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1525
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072954",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1526
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072954",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1527
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072b29",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1528
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05072b29",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1529
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070adf",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0503d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1530
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073c2f",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008003",
                "pretty_value": "MD5"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c61ef8"
              }
            ],
            "repeated": 0,
            "id": 1531
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073c38",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c61ef8"
              },
              {
                "name": "Buffer",
                "value": "MZ\\x90\\x00\\x03\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\xff\\xff\\x00\\x00\\xb8\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x00\\x00\\x00\\x0e\\x1f\\xba\\x0e\\x00\\xb4\t\\xcd!\\xb8\\x01L\\xcd!This program cannot be run in DOS mode.\r\r\n$\\x00\\x00\\x00\\x00\\x00\\x00\\x00PE\\x00\\x00L\\x01\\x03\\x00\\xad3qT\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xe0\\x00\\x02!\\x0b\\x01\\x0b\\x00\\x00\\x1a\\x00\\x00\\x002\\x00\\x00\\x00\\x00\\x00\\x00\\xee8\\x00\\x00\\x00 \\x00\\x00\\x00@\\x00\\x00\\x00\\x00@\\x00\\x00 \\x00\\x00\\x00\\x02\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xa0\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00@\\x85\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x9c8\\x00\\x00O\\x00\\x00\\x00\\x00@\\x00\\x00X/\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x00\\x00\\x0c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x08 \\x00\\x00H\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00.text\\x00\\x00\\x00\\xf4\\x18\\x00\\x00\\x00 \\x00\\x00\\x00\\x1a\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\x00`.rsrc\\x00\\x00\\x00X/\\x00\\x00\\x00@\\x00\\x00\\x000\\x00\\x00\\x00\\x1c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00@.reloc\\x00\\x00\\x0c\\x00\\x00\\x00\\x00\\x80\\x00\\x00\\x00\\x02\\x00\\x00\\x00L\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00B\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xd08\\x00\\x00\\x00\\x00\\x00\\x00H\\x00\\x00\\x00\\x02\\x00\\x05\\x00\\xd0!\\x00\\x00\\xcc\\x16\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x1e\\x02(\\x01\\x00\\x00\n*\\x1e\\x02(\\x04\\x00\\x00\n*\\xa6s\\x06\\x00\\x00\n\\x80\\x01\\x00\\x00\\x04s\\x07\\x00\\x00\n\\x80\\x02\\x00\\x00\\x04s\\x08\\x00\\x00\n\\x80\\x03\\x00\\x00\\x04s\t\\x00\\x00\n\\x80\\x04\\x00\\x00\\x04*\\x00\\x00\\x130\\x01\\x00\\x0b\\x00\\x00\\x00\\x01\\x00\\x00\\x11~\\x01\\x00\\x00\\x04o\n\\x00\\x00\n*\\x00\\x130\\x01\\x00\\x0b\\x00\\x00\\x00\\x02\\x00\\x00\\x11~\\x02\\x00\\x00\\x04o\\x0b\\x00\\x00\n*\\x00\\x130\\x01\\x00\\x0b\\x00\\x00\\x00\\x03\\x00\\x00\\x11~\\x03\\x00\\x00\\x04o\\x0c\\x00\\x00\n*\\x00\\x130\\x01\\x00\\x0b\\x00\\x00\\x00\\x04\\x00\\x00\\x11~\\x04\\x00\\x00\\x04o\r\\x00\\x00\n*\\x00\\x130\\x02\\x00\r\\x00\\x00\\x00\\x05\\x00\\x00\\x11\\x02\\x03(\\x11\\x00\\x00\n(\\x12\\x00\\x00\n*\\x00\\x00\\x00\\x130\\x01\\x00\\x07\\x00\\x00\\x00\\x06\\x00\\x00\\x11\\x02(\\x13\\x00\\x00\n*\\x00\\x130\\x01\\x00\\x0b\\x00\\x00\\x00\\x07\\x00\\x00\\x11\\xd0\\x05\\x00\\x00\\x02(\\x14\\x00\\x00\n*\\x00\\x130\\x01\\x00\\x07\\x00\\x00\\x00\\x08\\x00\\x00\\x11\\x02(\\x15\\x00\\x00\n*\\x00\\x130\\x01\\x00\\x10\\x00\\x00\\x00\t\\x00\\x00\\x11\\x02\\x8c\\x01\\x00\\x00\\x1b-\\x06(\\x01\\x00\\x00+*\\x02*\\x130\\x02\\x00\\x10\\x00\\x00\\x00\n\\x00\\x00\\x11\\x03\\x12\\x00\\xfe\\x15\\x02\\x00\\x00\\x1b\\x06\\x81\\x02\\x00\\x00\\x1b*\\x1e\\x02(\\x17\\x00\\x00\n*\\x130\\x02\\x00(\\x00\\x00\\x00\\x0b\\x00\\x00\\x11\\x02{\\x19\\x00\\x00\no\\x1a\\x00\\x00\n\\x0b\\x07\\x8c\\x03\\x00\\x00\\x1b-\\x12(\\x02\\x00\\x00+\\x0b\\x02{\\x19\\x00\\x00\n\\x07o\\x1b\\x00\\x00\n\\x07*J\\x02(\\x17\\x00\\x00\n\\x02s\\x1c\\x00\\x00\n}\\x19\\x00\\x00\n*\\x00BSJB\\x01\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x0c\\x00\\x00\\x00v2.0.50727\\x00\\x00\\x00\\x00\\x05\\x00l\\x00\\x00\\x00l\t\\x00\\x00#~\\x00\\x00\\xd8\t\\x00\\x00\\xf4\t\\x00\\x00#Strings\\x00\\x00\\x00\\x00\\xcc\\x13\\x00\\x00\\x08\\x00\\x00\\x00#US\\x00\\xd4\\x13\\x00\\x00\\x10\\x00\\x00\\x00#GUID\\x00\\x00\\x00\\xe4\\x13\\x00\\x00\\xe8\\x02\\x00\\x00#Blob\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x01W\\x15\\xa2\t\t\\x0e\\x00\\x00\\x00\\xfa%3\\x00\\x16\\x00\\x00\\x01\\x00\\x00\\x00\"\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x05\\x00\\x00\\x008\\x00\\x00\\x00'\\x00\\x00\\x00(\\x00\\x00\\x000\\x00\\x00\\x00\\x0b\\x00\\x00\\x00\\x04\\x00\\x00\\x00\t\\x00\\x00\\x00\t\\x00\\x00\\x00\t\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x03\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x03\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\xe1\t\\x01\\x00\\x00\\x00\\x00\\x00\n\\x00\\xb2\\x01\\x88\\x01\n\\x00\\xe6\\x01\\xc8\\x01\\x06\\x00\\xf6\\x01\\xef\\x01\n\\x00N\\x02\\x88\\x01\\x06\\x00\\xcc\\x02\\xef\\x01\n\\x00N\\x03$\\x03\\x06\\x00:\\x05\\xef\\x01\\x06\\x00\\xc5\\x05\\xaa\\x05\\x06\\x00\\x10\\x06\\xef\\x01\\x06\\x00<\\x06\\xef\\x01\\x06\\x00I\\x06\\xef\\x01\\x0e\\x00\\xbb\\x06\\xa5\\x06\\x0e\\x00\\xd4\\x06\\xa5\\x06\\x0e\\x00\\x01\\x07\\xe9\\x06\\x06\\x00+\\x07\\x18\\x07\n\\x00j\\x07C\\x07\n\\x00\\x82\\x07\\x13\\x00\\x0e\\x00\\xb7\\x07\\x9a\\x07\\x06\\x00\\xec\\x07\\xcc\\x07\\x06\\x00\n\\x08\\xef\\x01\\x06\\x00.\\x08\\xef\\x01\n\\x00G\\x08\\x13\\x00\\x06\\x00\\x95\\x08v\\x08\\x06\\x00\\xa9\\x08\\xef\\x01\\x06\\x00\\xbd\\x08\\xcc\\x07\\x06\\x00\\xdd\\x08\\xcc\\x07\\x06\\x00\r\t\\xfb\\x08\\x06\\x00*\tv\\x08\\x06\\x008\t\\xfb\\x08\\x06\\x00S\t\\xfb\\x08\\x06\\x00n\t\\xfb\\x08\\x06\\x00\\x87\t\\xfb\\x08\\x06\\x00\\xa0\t\\xfb\\x08\\x06\\x00\\xbd\t\\xfb\\x08\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x00\\x00)\\x007\\x00\\x05\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x00\\x00C\\x007\\x00\t\\x00\\x01\\x00\\x02\\x00\\x00\\x01\\x10\\x00N\\x007\\x00\r\\x00\\x01\\x00\\x03\\x00\\x05\\x01\\x00\\x00X\\x00\\x00\\x00\r\\x00\\x05\\x00\\x08\\x00\\x05\\x01\\x00\\x00f\\x00\\x00\\x00\r\\x00\\x05\\x00\\x0f\\x00\\xa1\\x00\\x00\\x00\\x81\\x00\\x90\\x00\\x00\\x00\\x06\\x00\\x11\\x00\\xa1\\x00\\x00\\x00\\xa6\\x00\\x90\\x00\\x00\\x00\\x06\\x00\\x17\\x00\\xa1\\x00\\x00\\x00\\xb2\\x00\\x90\\x00\\x00\\x00\\x06\\x00\\x19\\x00\\xa1\\x00\\x00\\x00\\xbd\\x00\\xcd\\x00\\x00\\x00\\x06\\x00\\x1b\\x00\\xa1\\x00\\x00\\x00\\xe7\\x00\\xcd\\x00\\x00\\x00\\x06\\x00\\x1e\\x00\\xa1\\x00\\x00\\x00\\xfa\\x00\\xcd\\x00\\x00\\x00\\x06\\x00%\\x00\\xa1\\x00\\x00\\x00\\x08\\x01\\xcd\\x00\\x00\\x00\\x06\\x00&\\x00\\xa1\\x00\\x00\\x00\\x1b\\x01\\xcd\\x00\\x00\\x00\\x06\\x00(\\x00\\xa1\\x00\\x00\\x00*\\x01F\\x01\\x00\\x00\\x06\\x00-\\x00\\xa1\\x00\\x00\\x00O\\x01F\\x01\\x00\\x00\\x06\\x002\\x00\\x01\\x01\\x00\\x00s\\x01F\\x01%\\x00\\x06\\x005\\x001\\x00\\x11\\x02 \\x001\\x00:\\x02-\\x001\\x00\\\\x02:\\x001\\x00\\x81\\x02G\\x00!\\x00]\\x03\\x90\\x00P \\x00\\x00\\x00\\x00\\x06\\x18\\xc2\\x01\\x13\\x00\\x01\\x00X \\x00\\x00\\x00\\x00\\x06\\x18\\xc2\\x01\\x13\\x00\\x01\\x00` \\x00\\x00\\x00\\x00\\x11\\x18\\xfd\\x01\\x17\\x00\\x01\\x00\\x8c \\x00\\x00\\x00\\x00\\x13\\x08\\x04\\x02\\x1b\\x00\\x01\\x00\\xa4 \\x00\\x00\\x00\\x00\\x13\\x08*\\x02(\\x00\\x01\\x00\\xbc \\x00\\x00\\x00\\x00\\x13\\x08S\\x025\\x00\\x01\\x00\\xd4 \\x00\\x00\\x00\\x00\\x13\\x08q\\x02B\\x00\\x01\\x00\\xec \\x00\\x00\\x00\\x00F\\x02\\xb7\\x02c\\x00\\x01\\x00\\x08!\\x00\\x00\\x00\\x00F\\x02\\xc0\\x02h\\x00\\x02\\x00\\x1c!\\x00\\x00\\x00\\x00\\x83\\x00\\xd1\\x02l\\x00\\x02\\x004!\\x00\\x00\\x00\\x00F\\x02\\xd9\\x02q\\x00\\x02\\x00H!\\x00\\x00\\x00\\x00\\x11\\x00\\xe2\\x02x\\x00\\x02\\x00d!\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x03\\x80\\x00\\x03\\x00\\x80!\\x00\\x00\\x00\\x00\\x06\\x18\\xc2\\x01\\x13\\x00\\x04\\x00\\x88!\\x00\\x00\\x00\\x00\\x03\\x08\\x14\\x03\\x8b\\x00\\x04\\x00\\xbc!\\x00\\x00\\x00\\x00\\x06\\x18\\xc2\\x01\\x13\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07s\\x03\\x9d\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\x8e\\x03\\xa4\\x00\\x06\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\x9a\\x03\\xa4\\x00\\x07\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\xa5\\x03\\xa9\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\xc6\\x03\\xae\\x00\t\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\xe1\\x03\\x13\\x00\\x0b\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\xf3\\x03\\xa4\\x00\\x0b\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\x08\\x04\\xa4\\x00\\x0c\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x07\\x1d\\x04\\x13\\x00\r\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x070\\x04\\x13\\x00\r\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x0fC\\x04\\xb4\\x00\r\\x00\\x00\\x00\\x00\\x00\\x00\\x00F\\x0f"
              },
              {
                "name": "Length",
                "value": "19968"
              }
            ],
            "repeated": 0,
            "id": 1532
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073c38",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c61ef8"
              }
            ],
            "repeated": 0,
            "id": 1533
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073c38",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008003",
                "pretty_value": "MD5"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c61e38"
              }
            ],
            "repeated": 0,
            "id": 1534
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073d45",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008003",
                "pretty_value": "MD5"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c61ef8"
              }
            ],
            "repeated": 0,
            "id": 1535
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073d4e",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptHashData",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c61ef8"
              },
              {
                "name": "Buffer",
                "value": "MZ\\x90\\x00\\x03\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\xff\\xff\\x00\\x00\\xb8\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x00\\x00\\x00\\x0e\\x1f\\xba\\x0e\\x00\\xb4\t\\xcd!\\xb8\\x01L\\xcd!This program cannot be run in DOS mode.\r\r\n$\\x00\\x00\\x00\\x00\\x00\\x00\\x00PE\\x00\\x00L\\x01\\x03\\x00\\xad'\\xe9T\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xe0\\x00\\x0e!\\x0b\\x01\\x06\\x00\\x00T\\x01\\x00\\x00\\x84\\x01\\x00\\x00\\x00\\x00\\x00\\xf2s\\x01\\x00\\x00 \\x00\\x00\\x00\\x80\\x01\\x00\\x00\\x00@\\x00\\x00 \\x00\\x00\\x00\\x02\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xe0\\x01\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x00\\x04\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x98s\\x01\\x00W\\x00\\x00\\x00\\x00\\xa0\\x01\\x00\\x88/\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x01\\x00\\x0c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x08 \\x00\\x00H\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00.text\\x00\\x00\\x00\\xf8S\\x01\\x00\\x00 \\x00\\x00\\x00T\\x01\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\x00`.reloc\\x00\\x00\\x0c\\x00\\x00\\x00\\x00\\x80\\x01\\x00\\x00\\x02\\x00\\x00\\x00V\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00B.rsrc\\x00\\x00\\x00\\x88/\\x00\\x00\\x00\\xa0\\x01\\x00\\x000\\x00\\x00\\x00X\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00@\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xd4s\\x01\\x00\\x00\\x00\\x00\\x00H\\x00\\x00\\x00\\x02\\x00\\x05\\x00\\xb4\\xeb\\x00\\x00\\xe4\\x87\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00Dc\\x00\\x00p\\x88\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x030\n\\x00\\x0f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x1b\\x1a-\\x07&(\"\\x00\\x00\n*&+\\xf7\\x00\\x030\t\\x007\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02(#\\x00\\x00\n\\x03\\x1e-\\x18&\\x04\\x16,\\x1a&\\x05\\x1b-\\x1c&\\x0e\\x04\\x80I\\x00\\x00\\x04(\\xbc\\x00\\x00\\x06*\\x80F\\x00\\x00\\x04+\\xe2\\x80G\\x00\\x00\\x04+\\xe0\\x80H\\x00\\x00\\x04+\\xde\\x00\\x06*\\x00\\x00\\x030\t\\x00#\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x03,\\x0c(7\\x00\\x00\\x06(8\\x00\\x00\\x06+\\x13\\x16\\x15-\\x08&(\\xbd\\x00\\x00\\x06+\\x07\\x80O\\x00\\x00\\x04+\\xf2*\\x00\\x06*\\x00\\x00\\x06*\\x00\\x00\\x130\\x04\\x00]\\x00\\x00\\x00\\x01\\x00\\x00\\x11\\x04\\x1d\\x15-$&\\x16\\x9ay0\\x00\\x00\\x02q0\\x00\\x00\\x02E\\x04\\x00\\x00\\x00\\x07\\x00\\x00\\x00\\x17\\x00\\x00\\x00'\\x00\\x00\\x00/\\x00\\x00\\x00+\\x03&+\\xda+.\\x04\\x16\\x18-\\x08&(\\x84\\x00\\x00\\x06+!&+\\xf6\\x04\\x16\\x1a-\\x08&(1\\x00\\x00\\x06+\\x11&+\\xf6\\x04(\\xb7\\x00\\x00\\x06+\\x06\\x04(\\x8e\\x00\\x00\\x06*\\x00\\x00\\x00\\x06*\\x00\\x00\\x06*\\x00\\x00\\x030\n\\x00\\x0f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x1c\\x1d-\\x07&(\\xbe\\x00\\x00\\x06*&+\\xf7\\x00\\x130\\x03\\x00F\\x00\\x00\\x00\\x02\\x00\\x00\\x11~\\x01\\x00\\x00\\x04\\x14($\\x00\\x00\n,3 \\xf0?y\\xa0(\"\\x00\\x00\\x06\\xd0\\x04\\x00\\x00\\x02(%\\x00\\x00\no&\\x00\\x00\ns'\\x00\\x00\n\\x1b-\\x08&\\x07\\x1b-\\x06&+\n\\x0b+\\xf6\\x80\\x01\\x00\\x00\\x04+\\x00~\\x01\\x00\\x00\\x04*\\x00\\x00\\x130\\x01\\x00\\x06\\x00\\x00\\x00\\x03\\x00\\x00\\x11~\\x02\\x00\\x00\\x04*\\x00\\x00\\x030\t\\x00\r\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x16,\\x02&*\\x80\\x02\\x00\\x00\\x04+\\xf8\\x00\\x00\\x00\\x130\\x04\\x00,\\x00\\x00\\x00\\x04\\x00\\x00\\x11(\\x0b\\x00\\x00\\x06 E>y\\xa0(\"\\x00\\x00\\x06~\\x02\\x00\\x00\\x04o(\\x00\\x00\n()\\x00\\x00\n\\x1d-\\x08&\\x07t\\x01\\x00\\x00\\x1b*\\x0b+\\xf6\\x130\\x04\\x00,\\x00\\x00\\x00\\x05\\x00\\x00\\x11(\\x0b\\x00\\x00\\x06 \\x80?y\\xa0(\"\\x00\\x00\\x06~\\x02\\x00\\x00\\x04o(\\x00\\x00\n()\\x00\\x00\n\\x15-\\x08&\\x06t\\x01\\x00\\x00\\x1b*\n+\\xf6\\x130\\x05\\x00\\xb7\\x00\\x00\\x00\\x06\\x00\\x00\\x11\\x02(#\\x00\\x00\n\\x02\\x18\\x8d\\x1f\\x00\\x00\\x01\\x15-G&&\\x02 \\x00\\x01\\x00\\x00\\x8d\\x1e\\x00\\x00\\x01\\x1a->&&\\x02\\xd0;\\x00\\x00\\x02(%\\x00\\x00\n(*\\x00\\x00\n\\x1e-0&&\\x02\\xd0:\\x00\\x00\\x02(%\\x00\\x00\n(*\\x00\\x00\n}\t\\x00\\x00\\x04s+\\x00\\x00\n\n\\x1fp\\x0b+\\x15}\\x06\\x00\\x00\\x04+\\xb4}\\x07\\x00\\x00\\x04+\\xbd}\\x08\\x00\\x00\\x04+\\xcb\\x06\\x07o,\\x00\\x00\n\\x07\\x17\\xd6\\x0b\\x07 \\x87\\x00\\x00\\x001\\xed\\x06\\x1c\\x8d\\x8a\\x00\\x00\\x01\\x0c\\x08\\x16\\x1f\r\\x9e\\x08\\x17\\x1e\\x9e\\x08\\x18\\x1f.\\x9e\\x08\\x19\\x1f-\\x9e\\x08\\x1a\\x1f\t\\x9e\\x08\\x1b\\x1f\\x1b\\x9e\\x08o-\\x00\\x00\n\\x02\\x06o.\\x00\\x00\n}\\x0e\\x00\\x00\\x04*\\x00\\x130\\x03\\x00\\x0f\\x00\\x00\\x00\\x07\\x00\\x00\\x11\\x02\\x15\\x1b-\\x07&{\\x03\\x00\\x00\\x04*&+\\xf7\\x00\\x030\t\\x00\\x1a\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x03\\x16,\\x07&&\\x03-\\x0f+\\x07}\\x03\\x00\\x00\\x04+\\xf4\\x02o\\x19\\x00\\x00\\x06*\\x00\\x00\\x130\\x03\\x00\\x0f\\x00\\x00\\x00\\x07\\x00\\x00\\x11\\x02\\x1a\\x1e-\\x07&{\\x04\\x00\\x00\\x04*&+\\xf7\\x00\\x030\t\\x00\\x0f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x03\\x18-\\x03&&*}\\x04\\x00\\x00\\x04+\\xf8\\x00\\x030\\x04\\x00\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02{\\x0f\\x00\\x00\\x04,\\x01*\\x02\\x17\\x1b-\\&&\\x02o\\x17\\x00\\x00\\x06\\x02s@\\x00\\x00\\x06\\x19-R&&\\x02{\\x05\\x00\\x00\\x04\\x02%\\xfe\\x07\\x1b\\x00\\x00\\x06sI\\x00\\x00\\x06\\x18-A&&\\x02{\\x05\\x00\\x00\\x04\\x02%\\xfe\\x07\\x1c\\x00\\x00\\x06sE\\x00\\x00\\x06}$\\x00\\x00\\x04\\x02{\\x05\\x00\\x00\\x04oA\\x00\\x00\\x06&\\x02{\\x05\\x00\\x00\\x04oB\\x00\\x00\\x06&*}\\x0f\\x00\\x00\\x04+\\x9f}\\x05\\x00\\x00\\x04+\\xa9}#\\x00\\x00\\x04+\\xba\\x00\\x030\t\\x007\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02{\\x0f\\x00\\x00\\x04-\\x01*\\x02\\x16\\x1c-\\x1b&&\\x02{\\x05\\x00\\x00\\x04oD\\x00\\x00\\x06\\x02\\x14\\x1d-\\x10&&\\x02o\\x19\\x00\\x00\\x06*}\\x0f\\x00\\x00\\x04+\\xe0}\\x05\\x00\\x00\\x04+\\xeb\\x00\\x130\\x05\\x00\\x94\\x00\\x00\\x00\\x08\\x00\\x00\\x11\\x02(/\\x00\\x00\n\\x19-c&\\x12\\x00#\\x00\\x00\\x00\\x00\\x00\\x00\\xf0\\xbf(0\\x00\\x00\n\\x19-R&&\\x02~1\\x00\\x00\n\\x15-N&&\\x02~P\\x00\\x00\\x04 \\xf3<y\\xa0(\"\\x00\\x00\\x06(2\\x00\\x00\n(3\\x00\\x00\n(4\\x00\\x00\n \\xfd<y\\xa0(\"\\x00\\x00\\x06(5\\x00\\x00\n(6\\x00\\x00\n}\\x0c\\x00\\x00\\x04\\x02o\\x13\\x00\\x00\\x06,)+\\x11\n+\\x9b}\n\\x00\\x00\\x04+\\xa9}\r\\x00\\x00\\x04+\\xad\\x16\\x02{\n\\x00\\x00\\x04(\\xad\\x00\\x00\\x06\\x8c?\\x00\\x00\\x01(\\xb9\\x00\\x00\\x06*\\x030\t\\x002\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02o\\x11\\x00\\x00\\x06,)\\x02{\\x0b\\x00\\x00\\x04-!\\x02\\x02{\\x0c\\x00\\x00\\x04\\x18\\x18s7\\x00\\x00\ns8\\x00\\x00\n\\x1b-\\x04&&+\\x07}\\x0b\\x00\\x00\\x04+\\x00*\\x00\\x00\\x030\t\\x00*\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02{\\x0b\\x00\\x00\\x04,!\\x02{\\x0b\\x00\\x00\\x04o9\\x00\\x00\n\\x02\\x14\\x18-\n&&\\x02o\\x17\\x00\\x00\\x06+\\x07}\\x0b\\x00\\x00\\x04+\\xf1*\\x00\\x00\\x130\\x04\\x00\\xed\\x01\\x00\\x00\t\\x00\\x00\\x11\\x02o\\x18\\x00\\x00\\x06(/\\x00\\x00\n\\x02{\n\\x00\\x00\\x04(:\\x00\\x00\n\\x18-\\x15&\\x12\\x01(;\\x00\\x00\n#\\x00\\x00\\x00\\x00\\x00\\x00\\xf0?60+\\x03\\x0b+\\xe9\\x02(/\\x00\\x00\n\\x15-\\x1b&&\\x02\\x16\\x02{\n\\x00\\x00\\x04(\\xad\\x00\\x00\\x06\\x8c?\\x00\\x00\\x01o\\x1a\\x00\\x00\\x06+\\x07}\n\\x00\\x00\\x04+\\xe0"
              },
              {
                "name": "Length",
                "value": "100352"
              }
            ],
            "repeated": 0,
            "id": 1536
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073d4e",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c61ef8"
              }
            ],
            "repeated": 0,
            "id": 1537
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x05073d4e",
            "parentcaller": "0x05070adf",
            "category": "crypto",
            "api": "CryptCreateHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Algid",
                "value": "0x00008003",
                "pretty_value": "MD5"
              },
              {
                "name": "CryptKey",
                "value": "0x00000000"
              },
              {
                "name": "Hash object",
                "value": "0x00c61fb8"
              }
            ],
            "repeated": 0,
            "id": 1538
          },
          {
            "timestamp": "2026-04-25 06:56:32,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05073daa",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05074000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1539
          },
          {
            "timestamp": "2026-04-25 06:56:32,547",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050740d0",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "AllocConsole"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3860"
              }
            ],
            "repeated": 0,
            "id": 1540
          },
          {
            "timestamp": "2026-04-25 06:56:32,547",
            "thread_id": "6504",
            "caller": "0x0288af0f",
            "parentcaller": "0x050740d0",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003e0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0012019f",
                "pretty_value": "FILE_GENERIC_READ|FILE_GENERIC_WRITE"
              },
              {
                "name": "FileName",
                "value": "\\Device\\ConDrv\\Server"
              },
              {
                "name": "CreateDisposition",
                "value": "2",
                "pretty_value": "FILE_CREATE"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1541
          },
          {
            "timestamp": "2026-04-25 06:56:32,547",
            "thread_id": "6504",
            "caller": "0x0288af0f",
            "parentcaller": "0x050740d0",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0012019f",
                "pretty_value": "FILE_GENERIC_READ|FILE_GENERIC_WRITE"
              },
              {
                "name": "FileName",
                "value": "\\Device\\ConDrv\\\\Reference"
              },
              {
                "name": "CreateDisposition",
                "value": "2",
                "pretty_value": "FILE_CREATE"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1542
          },
          {
            "timestamp": "2026-04-25 06:56:32,563",
            "thread_id": "6504",
            "caller": "0x0288af0f",
            "parentcaller": "0x050740d0",
            "category": "__notification__",
            "api": "sysenter",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadIdentifier",
                "value": "6504"
              },
              {
                "name": "Module",
                "value": "KERNELBASE.dll"
              },
              {
                "name": "Return Address",
                "value": "0x772833fc"
              }
            ],
            "repeated": 0,
            "id": 1543
          },
          {
            "timestamp": "2026-04-25 06:56:32,579",
            "thread_id": "6504",
            "caller": "0x0288af0f",
            "parentcaller": "0x050740d0",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e0"
              }
            ],
            "repeated": 0,
            "id": 1544
          },
          {
            "timestamp": "2026-04-25 06:56:32,579",
            "thread_id": "6504",
            "caller": "0x0288af0f",
            "parentcaller": "0x050740d0",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc00000b0",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x0012019f",
                "pretty_value": "FILE_GENERIC_READ|FILE_GENERIC_WRITE"
              },
              {
                "name": "FileName",
                "value": "\\Device\\ConDrv\\\\Connect"
              },
              {
                "name": "CreateDisposition",
                "value": "2",
                "pretty_value": "FILE_CREATE"
              },
              {
                "name": "ShareAccess",
                "value": "7",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1545
          },
          {
            "timestamp": "2026-04-25 06:56:32,579",
            "thread_id": "6504",
            "caller": "0x0288af0f",
            "parentcaller": "0x050740d0",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003ec"
              }
            ],
            "repeated": 0,
            "id": 1546
          },
          {
            "timestamp": "2026-04-25 06:56:32,579",
            "thread_id": "6504",
            "caller": "0x050740fc",
            "parentcaller": "0x050707d0",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetErrorMode"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0610"
              }
            ],
            "repeated": 0,
            "id": 1547
          },
          {
            "timestamp": "2026-04-25 06:56:32,579",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050740fc",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1548
          },
          {
            "timestamp": "2026-04-25 06:56:32,579",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050740fc",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateFileW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3140"
              }
            ],
            "repeated": 0,
            "id": 1549
          },
          {
            "timestamp": "2026-04-25 06:56:32,641",
            "thread_id": "6504",
            "caller": "0x0788009c",
            "parentcaller": "0x050740fc",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CloseHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2ee0"
              }
            ],
            "repeated": 0,
            "id": 1550
          },
          {
            "timestamp": "2026-04-25 06:56:32,641",
            "thread_id": "6504",
            "caller": "0x078800d3",
            "parentcaller": "0x050740fc",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "DesiredAccess",
                "value": "0x40100080",
                "pretty_value": "GENERIC_WRITE|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "CreateDisposition",
                "value": "3",
                "pretty_value": "FILE_OPEN_IF"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1551
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050740fc",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileType"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3390"
              }
            ],
            "repeated": 0,
            "id": 1552
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050740fc",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetFilePointer"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3550"
              }
            ],
            "repeated": 0,
            "id": 1553
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x07880334",
            "parentcaller": "0x050740fc",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1554
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x07880334",
            "parentcaller": "0x050740fc",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1555
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x050707d6",
            "parentcaller": "0x05070674",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "ReleaseMutex"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3050"
              }
            ],
            "repeated": 0,
            "id": 1556
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050707d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateMutex"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1557
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050707d6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateMutexW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2fa0"
              }
            ],
            "repeated": 0,
            "id": 1558
          },
          {
            "timestamp": "2026-04-25 06:56:32,657",
            "thread_id": "6504",
            "caller": "0x07880503",
            "parentcaller": "0x050707d6",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e0"
              },
              {
                "name": "MutexName",
                "value": "Global\\{80a8cf76-041f-4f9a-8ed2-2be59774b180}"
              },
              {
                "name": "InitialOwner",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 1559
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507468d",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegOpenKeyEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1560
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507468d",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegOpenKeyExA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebec10"
              }
            ],
            "repeated": 0,
            "id": 1561
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x0788060d",
            "parentcaller": "0x0507468d",
            "category": "registry",
            "api": "RegOpenKeyExA",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Microsoft\\Cryptography"
              },
              {
                "name": "Handle",
                "value": "0x000003e4"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography"
              }
            ],
            "repeated": 0,
            "id": 1562
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050746b8",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1563
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050746b8",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueExA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebea50"
              }
            ],
            "repeated": 0,
            "id": 1564
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x07880718",
            "parentcaller": "0x050746b8",
            "category": "registry",
            "api": "RegQueryValueExA",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              },
              {
                "name": "ValueName",
                "value": "MachineGuid"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid"
              }
            ],
            "repeated": 0,
            "id": 1565
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x07880718",
            "parentcaller": "0x0507470f",
            "category": "registry",
            "api": "RegQueryValueExA",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              },
              {
                "name": "ValueName",
                "value": "MachineGuid"
              },
              {
                "name": "Data",
                "value": "339d92a4-c255-4420-97b0-5631bd58867a"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid"
              }
            ],
            "repeated": 0,
            "id": 1566
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507471d",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegCloseKey"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebeb20"
              }
            ],
            "repeated": 0,
            "id": 1567
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x0288a3a6",
            "parentcaller": "0x0507471d",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              }
            ],
            "repeated": 0,
            "id": 1568
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x0288aab3",
            "parentcaller": "0x050747ca",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
              },
              {
                "name": "Handle",
                "value": "0x000003e4"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
              }
            ],
            "repeated": 0,
            "id": 1569
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x0288abb6",
            "parentcaller": "0x05074808",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              },
              {
                "name": "ValueName",
                "value": "EnableLUA"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA"
              }
            ],
            "repeated": 0,
            "id": 1570
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074808",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1571
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074808",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe8e0"
              }
            ],
            "repeated": 0,
            "id": 1572
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x07880816",
            "parentcaller": "0x05074808",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              },
              {
                "name": "ValueName",
                "value": "EnableLUA"
              },
              {
                "name": "Data",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA"
              }
            ],
            "repeated": 0,
            "id": 1573
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074810",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1574
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074810",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1575
          },
          {
            "timestamp": "2026-04-25 06:56:32,735",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507449c",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentProcess"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2e80"
              }
            ],
            "repeated": 0,
            "id": 1576
          },
          {
            "timestamp": "2026-04-25 06:56:32,751",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d3e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\shfolder"
              },
              {
                "name": "DllBase",
                "value": "0x70f00000"
              }
            ],
            "repeated": 0,
            "id": 1577
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d3e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "shfolder.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x70f00000"
              }
            ],
            "repeated": 0,
            "id": 1578
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d3e",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x70f00000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "shfolder.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1579
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d3e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "shfolder.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x70f00000"
              },
              {
                "name": "FunctionName",
                "value": "SHGetFolderPath"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1580
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d3e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "shfolder.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x70f00000"
              },
              {
                "name": "FunctionName",
                "value": "SHGetFolderPathW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x70f01cb0"
              }
            ],
            "repeated": 0,
            "id": 1581
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880908",
            "parentcaller": "0x05074d3e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1582
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880908",
            "parentcaller": "0x05074d3e",
            "category": "filesystem",
            "api": "SHGetFolderPathW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Folder",
                "value": "0x0000001a",
                "pretty_value": "CSIDL_APPDATA"
              },
              {
                "name": "Path",
                "value": "C:\\Users\\cape\\AppData\\Roaming"
              }
            ],
            "repeated": 0,
            "id": 1583
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d87",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileAttributesEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1584
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d87",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileAttributesExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3330"
              }
            ],
            "repeated": 0,
            "id": 1585
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05074d87",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A"
              }
            ],
            "repeated": 0,
            "id": 1586
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05074d87",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming"
              }
            ],
            "repeated": 0,
            "id": 1587
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05074d87",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData"
              }
            ],
            "repeated": 0,
            "id": 1588
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05074d87",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape"
              }
            ],
            "repeated": 0,
            "id": 1589
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05074d87",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users"
              }
            ],
            "repeated": 0,
            "id": 1590
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d87",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateDirectory"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1591
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074d87",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateDirectoryW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3110"
              }
            ],
            "repeated": 0,
            "id": 1592
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880a59",
            "parentcaller": "0x05074d87",
            "category": "filesystem",
            "api": "CreateDirectoryW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DirectoryName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A"
              }
            ],
            "repeated": 0,
            "id": 1593
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x05074e73",
            "parentcaller": "0x0507451c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1594
          },
          {
            "timestamp": "2026-04-25 06:56:32,766",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05074e9d",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat"
              }
            ],
            "repeated": 0,
            "id": 1595
          },
          {
            "timestamp": "2026-04-25 06:56:32,860",
            "thread_id": "6504",
            "caller": "0x078800d3",
            "parentcaller": "0x05074ed9",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000404"
              },
              {
                "name": "DesiredAccess",
                "value": "0x40100080",
                "pretty_value": "GENERIC_WRITE|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat"
              },
              {
                "name": "CreateDisposition",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1596
          },
          {
            "timestamp": "2026-04-25 06:56:32,860",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05074ed9",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "WriteFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad35b0"
              }
            ],
            "repeated": 0,
            "id": 1597
          },
          {
            "timestamp": "2026-04-25 06:56:32,860",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05074ed9",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000404"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat"
              },
              {
                "name": "Buffer",
                "value": "\\xe0\\xf7\\xe8\\xc8\\x97\\xa2\\xdeH"
              },
              {
                "name": "Length",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 1598
          },
          {
            "timestamp": "2026-04-25 06:56:32,860",
            "thread_id": "6504",
            "caller": "0x0788019e",
            "parentcaller": "0x05074ed9",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000404"
              }
            ],
            "repeated": 0,
            "id": 1599
          },
          {
            "timestamp": "2026-04-25 06:56:32,891",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05075000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1600
          },
          {
            "timestamp": "2026-04-25 06:56:32,891",
            "thread_id": "6504",
            "caller": "0x07880908",
            "parentcaller": "0x0507552f",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1601
          },
          {
            "timestamp": "2026-04-25 06:56:32,891",
            "thread_id": "6504",
            "caller": "0x07880908",
            "parentcaller": "0x0507552f",
            "category": "filesystem",
            "api": "SHGetFolderPathW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Folder",
                "value": "0x00000026",
                "pretty_value": "CSIDL_PROGRAM_FILES"
              },
              {
                "name": "Path",
                "value": "C:\\Program Files (x86)"
              }
            ],
            "repeated": 0,
            "id": 1602
          },
          {
            "timestamp": "2026-04-25 06:56:32,891",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050707ee",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07891000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1603
          },
          {
            "timestamp": "2026-04-25 06:56:32,922",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x050755c5",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Exceptions\\1.2.2.0"
              }
            ],
            "repeated": 0,
            "id": 1604
          },
          {
            "timestamp": "2026-04-25 06:56:32,985",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050707f4",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fd2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1605
          },
          {
            "timestamp": "2026-04-25 06:56:32,985",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050707f4",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fdc000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1606
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1607
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1608
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1609
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "44"
              }
            ],
            "repeated": 0,
            "id": 1610
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 1611
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "RtlGetSystemTimeAndBias"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77ec7190"
              }
            ],
            "repeated": 0,
            "id": 1612
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\tzres.dll"
              }
            ],
            "repeated": 0,
            "id": 1613
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\tzres.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1614
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000408"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000005",
                "pretty_value": "SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\tzres.dll"
              }
            ],
            "repeated": 0,
            "id": 1615
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000408"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x00003000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1616
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000408"
              }
            ],
            "repeated": 0,
            "id": 1617
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1618
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020019",
                "pretty_value": "KEY_READ"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\Software\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU"
              }
            ],
            "repeated": 0,
            "id": 1619
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000410"
              },
              {
                "name": "ValueName",
                "value": "Latest"
              },
              {
                "name": "Type",
                "value": "1",
                "pretty_value": "REG_SZ"
              },
              {
                "name": "Information",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest"
              }
            ],
            "repeated": 0,
            "id": 1620
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1621
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1622
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000408"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "FileName",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              }
            ],
            "repeated": 0,
            "id": 1623
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000408"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095d088"
              },
              {
                "name": "ViewSize",
                "value": "0x0000e000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1624
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000408"
              }
            ],
            "repeated": 0,
            "id": 1625
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x0000e000"
              }
            ],
            "repeated": 0,
            "id": 1626
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1627
          },
          {
            "timestamp": "2026-04-25 06:56:33,047",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1628
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\sysnative\\ru-RU\\tzres.dll.mui"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1629
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              }
            ],
            "repeated": 0,
            "id": 1630
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095d088"
              },
              {
                "name": "ViewSize",
                "value": "0x0000b000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1631
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000414"
              }
            ],
            "repeated": 0,
            "id": 1632
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x0000b000"
              }
            ],
            "repeated": 0,
            "id": 1633
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1634
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              }
            ],
            "repeated": 0,
            "id": 1635
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\tzres.dll"
              }
            ],
            "repeated": 0,
            "id": 1636
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\tzres.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1637
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000005",
                "pretty_value": "SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\tzres.dll"
              }
            ],
            "repeated": 0,
            "id": 1638
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x00000000"
              },
              {
                "name": "ViewSize",
                "value": "0x00003000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1639
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000414"
              }
            ],
            "repeated": 0,
            "id": 1640
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1641
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020019",
                "pretty_value": "KEY_READ"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\Software\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU"
              }
            ],
            "repeated": 0,
            "id": 1642
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000410"
              },
              {
                "name": "ValueName",
                "value": "Latest"
              },
              {
                "name": "Type",
                "value": "1",
                "pretty_value": "REG_SZ"
              },
              {
                "name": "Information",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest"
              }
            ],
            "repeated": 0,
            "id": 1643
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1644
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1645
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "FileName",
                "value": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              }
            ],
            "repeated": 0,
            "id": 1646
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095d088"
              },
              {
                "name": "ViewSize",
                "value": "0x0000e000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1647
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000414"
              }
            ],
            "repeated": 0,
            "id": 1648
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x0000e000"
              }
            ],
            "repeated": 0,
            "id": 1649
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1650
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1651
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "filesystem",
            "api": "NtOpenFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00100001",
                "pretty_value": "FILE_READ_ACCESS|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\sysnative\\ru-RU\\tzres.dll.mui"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              }
            ],
            "repeated": 0,
            "id": 1652
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000410"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\ru-RU\\tzres.dll.mui"
              }
            ],
            "repeated": 0,
            "id": 1653
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000414"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095d088"
              },
              {
                "name": "ViewSize",
                "value": "0x0000b000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1654
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000414"
              }
            ],
            "repeated": 0,
            "id": 1655
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "RegionSize",
                "value": "0x0000b000"
              }
            ],
            "repeated": 0,
            "id": 1656
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 1657
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x050757fe",
            "parentcaller": "0x05075694",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00003000"
              }
            ],
            "repeated": 0,
            "id": 1658
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x05075810",
            "parentcaller": "0x05075694",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "44"
              }
            ],
            "repeated": 0,
            "id": 1659
          },
          {
            "timestamp": "2026-04-25 06:56:33,063",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x0507584c",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "\r\n"
              },
              {
                "name": "Length",
                "value": "2"
              }
            ],
            "repeated": 0,
            "id": 1660
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x05075863",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1661
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x05075884",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "GetUserDefaultLCID",
            "status": true,
            "return": "0x00000419",
            "arguments": [
              {
                "name": "SystemDefaultLangID",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 1,
            "id": 1662
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x05075884",
            "parentcaller": "0x05075694",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Control Panel\\International"
              },
              {
                "name": "Handle",
                "value": "0x0000041c"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Control Panel\\International"
              }
            ],
            "repeated": 0,
            "id": 1663
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x05075884",
            "parentcaller": "0x05075694",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000041c"
              },
              {
                "name": "ValueName",
                "value": "sYearMonth"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Control Panel\\International\\sYearMonth"
              }
            ],
            "repeated": 0,
            "id": 1664
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x05075884",
            "parentcaller": "0x05075694",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000041c"
              }
            ],
            "repeated": 0,
            "id": 1665
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075891",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "25 \\x430\\x43f\\x440\\x435\\x43b\\x44f 2026 \\x433.\r\n"
              },
              {
                "name": "Length",
                "value": "26"
              }
            ],
            "repeated": 0,
            "id": 1666
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x0507589f",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "\r\n"
              },
              {
                "name": "Length",
                "value": "2"
              }
            ],
            "repeated": 0,
            "id": 1667
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x0507593a",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1668
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x05075694",
            "parentcaller": "0x050707f4",
            "category": "system",
            "api": "GetUserDefaultLCID",
            "status": true,
            "return": "0x00000419",
            "arguments": [
              {
                "name": "SystemDefaultLangID",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 1669
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1670
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "Builder settings loaded..\r\n"
              },
              {
                "name": "Length",
                "value": "27"
              }
            ],
            "repeated": 0,
            "id": 1671
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x05075694",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1672
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x05075735",
            "parentcaller": "0x050707f4",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05552000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1673
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 1674
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1675
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "KeyboardLogging = True\r\n"
              },
              {
                "name": "Length",
                "value": "24"
              }
            ],
            "repeated": 0,
            "id": 1676
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1677
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1678
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "BuildTime = 25.04.2026 9:02:11\r\n"
              },
              {
                "name": "Length",
                "value": "32"
              }
            ],
            "repeated": 0,
            "id": 1679
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1680
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1681
          },
          {
            "timestamp": "2026-04-25 06:56:33,079",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "Version = 1.2.2.0\r\n"
              },
              {
                "name": "Length",
                "value": "19"
              }
            ],
            "repeated": 0,
            "id": 1682
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1683
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1684
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "Mutex = 80a8cf76-041f-4f9a-8ed2-2be59774b180\r\n"
              },
              {
                "name": "Length",
                "value": "46"
              }
            ],
            "repeated": 0,
            "id": 1685
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1686
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1687
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "DefaultGroup = BBC News\r\n"
              },
              {
                "name": "Length",
                "value": "25"
              }
            ],
            "repeated": 0,
            "id": 1688
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1689
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1690
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "PrimaryConnectionHost = bbc.in.net\r\n"
              },
              {
                "name": "Length",
                "value": "36"
              }
            ],
            "repeated": 0,
            "id": 1691
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1692
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1693
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "BackupConnectionHost = syashop.uk.com\r\n"
              },
              {
                "name": "Length",
                "value": "39"
              }
            ],
            "repeated": 0,
            "id": 1694
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1695
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1696
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "ConnectionPort = 443\r\n"
              },
              {
                "name": "Length",
                "value": "22"
              }
            ],
            "repeated": 0,
            "id": 1697
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1698
          },
          {
            "timestamp": "2026-04-25 06:56:33,094",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1699
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "RunOnStartup = True\r\n"
              },
              {
                "name": "Length",
                "value": "21"
              }
            ],
            "repeated": 0,
            "id": 1700
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1701
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1702
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "RequestElevation = True\r\n"
              },
              {
                "name": "Length",
                "value": "25"
              }
            ],
            "repeated": 0,
            "id": 1703
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1704
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1705
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "BypassUserAccountControl = False\r\n"
              },
              {
                "name": "Length",
                "value": "34"
              }
            ],
            "repeated": 0,
            "id": 1706
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1707
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1708
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "ClearZoneIdentifier = True\r\n"
              },
              {
                "name": "Length",
                "value": "28"
              }
            ],
            "repeated": 0,
            "id": 1709
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1710
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1711
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "ClearAccessControl = True\r\n"
              },
              {
                "name": "Length",
                "value": "27"
              }
            ],
            "repeated": 0,
            "id": 1712
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1713
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1714
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "SetCriticalProcess = False\r\n"
              },
              {
                "name": "Length",
                "value": "28"
              }
            ],
            "repeated": 0,
            "id": 1715
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1716
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1717
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "PreventSystemSleep = True\r\n"
              },
              {
                "name": "Length",
                "value": "27"
              }
            ],
            "repeated": 0,
            "id": 1718
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1719
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1720
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "ActivateAwayMode = True\r\n"
              },
              {
                "name": "Length",
                "value": "25"
              }
            ],
            "repeated": 0,
            "id": 1721
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1722
          },
          {
            "timestamp": "2026-04-25 06:56:33,110",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1723
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "EnableDebugMode = True\r\n"
              },
              {
                "name": "Length",
                "value": "24"
              }
            ],
            "repeated": 0,
            "id": 1724
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1725
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1726
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "RunDelay = 0\r\n"
              },
              {
                "name": "Length",
                "value": "14"
              }
            ],
            "repeated": 0,
            "id": 1727
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1728
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1729
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "ConnectDelay = 4000\r\n"
              },
              {
                "name": "Length",
                "value": "21"
              }
            ],
            "repeated": 0,
            "id": 1730
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1731
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1732
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "RestartDelay = 5000\r\n"
              },
              {
                "name": "Length",
                "value": "21"
              }
            ],
            "repeated": 0,
            "id": 1733
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1734
          },
          {
            "timestamp": "2026-04-25 06:56:33,126",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1735
          },
          {
            "timestamp": "2026-04-25 06:56:33,188",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "TimeoutInterval = 5000\r\n"
              },
              {
                "name": "Length",
                "value": "24"
              }
            ],
            "repeated": 0,
            "id": 1736
          },
          {
            "timestamp": "2026-04-25 06:56:33,188",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1737
          },
          {
            "timestamp": "2026-04-25 06:56:33,188",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              }
            ],
            "repeated": 0,
            "id": 1738
          },
          {
            "timestamp": "2026-04-25 06:56:33,188",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075988",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "KeepAliveTimeout = 30000\r\n"
              },
              {
                "name": "Length",
                "value": "26"
              }
            ],
            "repeated": 0,
            "id": 1739
          },
          {
            "timestamp": "2026-04-25 06:56:33,188",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1740
          },
          {
            "timestamp": "2026-04-25 06:56:33,188",
            "thread_id": "6504",
            "caller": "0x07880b33",
            "parentcaller": "0x05075977",
            "category": "filesystem",
            "api": "NtWriteFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003ec"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
              },
              {
                "name": "Buffer",
                "value": "9:56: "
              },
              {
                "name": "Length",
                "value": "6"
              },
              {
                "name": "Status",
                "value": "Maximum logged writes reached for this file"
              }
            ],
            "repeated": 0,
            "id": 1741
          },
          {
            "timestamp": "2026-04-25 06:56:33,188",
            "thread_id": "6504",
            "caller": "0x050759c3",
            "parentcaller": "0x0507573d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 15,
            "id": 1742
          },
          {
            "timestamp": "2026-04-25 06:56:33,204",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05075ac0",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Program Files (x86)\\NAT Subsystem"
              }
            ],
            "repeated": 0,
            "id": 1743
          },
          {
            "timestamp": "2026-04-25 06:56:33,204",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05075ac0",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Program Files (x86)"
              }
            ],
            "repeated": 0,
            "id": 1744
          },
          {
            "timestamp": "2026-04-25 06:56:33,204",
            "thread_id": "6504",
            "caller": "0x07880a59",
            "parentcaller": "0x05075ac0",
            "category": "filesystem",
            "api": "CreateDirectoryW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DirectoryName",
                "value": "C:\\Program Files (x86)\\NAT Subsystem"
              }
            ],
            "repeated": 0,
            "id": 1745
          },
          {
            "timestamp": "2026-04-25 06:56:33,219",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075acc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0289d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1746
          },
          {
            "timestamp": "2026-04-25 06:56:33,329",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075acc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0503e000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1747
          },
          {
            "timestamp": "2026-04-25 06:56:33,329",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05075b97",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
              }
            ],
            "repeated": 0,
            "id": 1748
          },
          {
            "timestamp": "2026-04-25 06:56:33,329",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075adb",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "DeleteFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1749
          },
          {
            "timestamp": "2026-04-25 06:56:33,329",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075adb",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "DeleteFileW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3170"
              }
            ],
            "repeated": 0,
            "id": 1750
          },
          {
            "timestamp": "2026-04-25 06:56:33,329",
            "thread_id": "6504",
            "caller": "0x0288bf0e",
            "parentcaller": "0x05075adb",
            "category": "filesystem",
            "api": "DeleteFileW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
              }
            ],
            "repeated": 0,
            "id": 1751
          },
          {
            "timestamp": "2026-04-25 06:56:33,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075aef",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CopyFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1752
          },
          {
            "timestamp": "2026-04-25 06:56:33,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075aef",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CopyFileW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad37e0"
              }
            ],
            "repeated": 0,
            "id": 1753
          },
          {
            "timestamp": "2026-04-25 06:56:33,469",
            "thread_id": "6504",
            "caller": "0x07880c00",
            "parentcaller": "0x05075aef",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\ntmarta"
              },
              {
                "name": "DllBase",
                "value": "0x70ed0000"
              }
            ],
            "repeated": 0,
            "id": 1754
          },
          {
            "timestamp": "2026-04-25 06:56:33,532",
            "thread_id": "6504",
            "caller": "0x07880c00",
            "parentcaller": "0x05075aef",
            "category": "filesystem",
            "api": "CopyFileW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ExistingFileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "NewFileName",
                "value": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1755
          },
          {
            "timestamp": "2026-04-25 06:56:33,532",
            "thread_id": "6504",
            "caller": "0x0288aab3",
            "parentcaller": "0x05075b04",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows\\CurrentVersion\\Run"
              },
              {
                "name": "Handle",
                "value": "0x00000410"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Run"
              }
            ],
            "repeated": 0,
            "id": 1756
          },
          {
            "timestamp": "2026-04-25 06:56:33,532",
            "thread_id": "6504",
            "caller": "0x0288abb6",
            "parentcaller": "0x05075a1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              },
              {
                "name": "ValueName",
                "value": "NAT Subsystem"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem"
              }
            ],
            "repeated": 0,
            "id": 1757
          },
          {
            "timestamp": "2026-04-25 06:56:33,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075a1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegSetValueEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1758
          },
          {
            "timestamp": "2026-04-25 06:56:33,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075a1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegSetValueExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebebf0"
              }
            ],
            "repeated": 0,
            "id": 1759
          },
          {
            "timestamp": "2026-04-25 06:56:33,610",
            "thread_id": "6504",
            "caller": "0x07880cf2",
            "parentcaller": "0x05075a1e",
            "category": "registry",
            "api": "RegSetValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              },
              {
                "name": "ValueName",
                "value": "NAT Subsystem"
              },
              {
                "name": "Type",
                "value": "1",
                "pretty_value": "REG_SZ"
              },
              {
                "name": "Buffer",
                "value": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
              },
              {
                "name": "BufferLength",
                "value": "94"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem"
              }
            ],
            "repeated": 0,
            "id": 1760
          },
          {
            "timestamp": "2026-04-25 06:56:33,610",
            "thread_id": "6504",
            "caller": "0x0288aab3",
            "parentcaller": "0x05075d01",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows\\CurrentVersion\\Run"
              },
              {
                "name": "Handle",
                "value": "0x00000414"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run"
              }
            ],
            "repeated": 0,
            "id": 1761
          },
          {
            "timestamp": "2026-04-25 06:56:33,610",
            "thread_id": "6504",
            "caller": "0x0288abb6",
            "parentcaller": "0x05075d18",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000414"
              },
              {
                "name": "ValueName",
                "value": "NAT Subsystem"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem"
              }
            ],
            "repeated": 0,
            "id": 1762
          },
          {
            "timestamp": "2026-04-25 06:56:33,751",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x05075d77",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 1763
          },
          {
            "timestamp": "2026-04-25 06:56:33,751",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x05075d77",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000043c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1764
          },
          {
            "timestamp": "2026-04-25 06:56:33,751",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x05075d77",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000043c"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x00P\\x00\\x00\\x00\\x00\\x00\\x00`O\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1765
          },
          {
            "timestamp": "2026-04-25 06:56:33,766",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x05075d77",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000440"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x0000043c"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp"
              }
            ],
            "repeated": 0,
            "id": 1766
          },
          {
            "timestamp": "2026-04-25 06:56:33,766",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x05075d77",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000440"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078b0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095cfe8"
              },
              {
                "name": "ViewSize",
                "value": "0x00005000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1767
          },
          {
            "timestamp": "2026-04-25 06:56:33,766",
            "thread_id": "6504",
            "caller": "0x028823e7",
            "parentcaller": "0x05075d77",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 1768
          },
          {
            "timestamp": "2026-04-25 06:56:33,860",
            "thread_id": "6504",
            "caller": "0x05075d77",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000444"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1769
          },
          {
            "timestamp": "2026-04-25 06:56:33,860",
            "thread_id": "6504",
            "caller": "0x05075d77",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000444"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x00\\x10\\x04\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1770
          },
          {
            "timestamp": "2026-04-25 06:56:33,860",
            "thread_id": "6504",
            "caller": "0x05075d77",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000448"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000444"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp"
              }
            ],
            "repeated": 0,
            "id": 1771
          },
          {
            "timestamp": "2026-04-25 06:56:33,860",
            "thread_id": "6504",
            "caller": "0x05075d77",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000448"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x078c0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095dbec"
              },
              {
                "name": "ViewSize",
                "value": "0x00041000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1772
          },
          {
            "timestamp": "2026-04-25 06:56:33,860",
            "thread_id": "6504",
            "caller": "0x05075d77",
            "parentcaller": "0x05075b21",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1773
          },
          {
            "timestamp": "2026-04-25 06:56:33,922",
            "thread_id": "6504",
            "caller": "0x0288bf0e",
            "parentcaller": "0x05075d86",
            "category": "filesystem",
            "api": "DeleteFileW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\NAT Subsystem\\natss.exe"
              }
            ],
            "repeated": 0,
            "id": 1774
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05562000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1775
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Globalization\\en-us.nlp"
              }
            ],
            "repeated": 0,
            "id": 1776
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05075d86",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe.config"
              }
            ],
            "repeated": 0,
            "id": 1777
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.mscorlib.resources_ru-RU_b77a5c561934e089"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.mscorlib.resources_ru-RU_b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 1778
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\5e8c75c\\de7da15"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\5e8c75c\\de7da15"
              }
            ],
            "repeated": 0,
            "id": 1779
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib.resources\\2.0.0.0_ru-RU_b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 1780
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru-RU_b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 1781
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC\\mscorlib.resources\\2.0.0.0_ru-RU_b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 1782
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 1783
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/mscorlib.resources.DLL"
              }
            ],
            "repeated": 0,
            "id": 1784
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/mscorlib.resources/mscorlib.resources.DLL"
              }
            ],
            "repeated": 0,
            "id": 1785
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 1786
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/mscorlib.resources.EXE"
              }
            ],
            "repeated": 0,
            "id": 1787
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/mscorlib.resources/mscorlib.resources.EXE"
              }
            ],
            "repeated": 0,
            "id": 1788
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00ca9000"
              },
              {
                "name": "RegionSize",
                "value": "0x0002c000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 1789
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00ca2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00006000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 1790
          },
          {
            "timestamp": "2026-04-25 06:56:33,938",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 1791
          },
          {
            "timestamp": "2026-04-25 06:56:33,954",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources\\mscorlib.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 1792
          },
          {
            "timestamp": "2026-04-25 06:56:33,954",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources.exe"
              }
            ],
            "repeated": 0,
            "id": 1793
          },
          {
            "timestamp": "2026-04-25 06:56:33,954",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00ca2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00006000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1794
          },
          {
            "timestamp": "2026-04-25 06:56:33,954",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00ca9000"
              },
              {
                "name": "RegionSize",
                "value": "0x0002c000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1795
          },
          {
            "timestamp": "2026-04-25 06:56:33,954",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources\\mscorlib.resources.exe"
              }
            ],
            "repeated": 0,
            "id": 1796
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020008"
              },
              {
                "name": "TokenHandle",
                "value": "0x0000044c"
              }
            ],
            "repeated": 0,
            "id": 1797
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "1"
              },
              {
                "name": "TokenInformation",
                "value": " \\xcd\\x95\\x00\\x00\\x00\\x00\\x00\\x01\\x05\\x00\\x00\\x00\\x00\\x00\\x05\\x15\\x00\\x00\\x00\\xcc\\x04\\x82\\xdf\\xb2e\\xf3\\xf4\\xc8\\x97L\\xbe\\xe8\\x03\\x00\\x00\\xa5Cxs\\x18\\xda\\xc9\\x00\\xa8Hxs-\\x98w<\\x00\\x00\\x00\\x00\\xd8\\xd8\\xc4\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x00\\x00\\x02\\x00\\x00\\x000\\xce\\x95\\x00\\x00\\x0f\\xcds"
              }
            ],
            "repeated": 0,
            "id": 1798
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              }
            ],
            "repeated": 0,
            "id": 1799
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-3749840076-4109591986-3192690632-1000\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-3749840076-4109591986-3192690632-1000\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 1800
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 1801
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Classes\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe"
              }
            ],
            "repeated": 0,
            "id": 1802
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-3749840076-4109591986-3192690632-1000\\Installer\\Assemblies\\Global"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-3749840076-4109591986-3192690632-1000\\Installer\\Assemblies\\Global"
              }
            ],
            "repeated": 0,
            "id": 1803
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000001",
                "pretty_value": "HKEY_CURRENT_USER"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Installer\\Assemblies\\Global"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Assemblies\\Global"
              }
            ],
            "repeated": 0,
            "id": 1804
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Classes\\Installer\\Assemblies\\Global"
              },
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global"
              }
            ],
            "repeated": 0,
            "id": 1805
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "ValueName",
                "value": "policy.1.0.cli_uretypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"9.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\policy.1.0.cli_uretypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"9.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1806
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "ValueName",
                "value": "cli_cppuhelper,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.23.0\",culture=\"neutral\",processorArchitecture=\"x86\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\cli_cppuhelper,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.23.0\",culture=\"neutral\",processorArchitecture=\"x86\""
              }
            ],
            "repeated": 0,
            "id": 1807
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "2"
              },
              {
                "name": "ValueName",
                "value": "policy.1.0.cli_basetypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"20.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\policy.1.0.cli_basetypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"20.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1808
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "3"
              },
              {
                "name": "ValueName",
                "value": "cli_basetypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.20.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\cli_basetypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.20.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1809
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "4"
              },
              {
                "name": "ValueName",
                "value": "cli_oootypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.9.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\cli_oootypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.9.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1810
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "5"
              },
              {
                "name": "ValueName",
                "value": "policy.1.0.cli_cppuhelper,publicKeyToken=\"ce2cb7e279207b9e\",version=\"23.0.0.0\",culture=\"neutral\",processorArchitecture=\"x86\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\policy.1.0.cli_cppuhelper,publicKeyToken=\"ce2cb7e279207b9e\",version=\"23.0.0.0\",culture=\"neutral\",processorArchitecture=\"x86\""
              }
            ],
            "repeated": 0,
            "id": 1811
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "6"
              },
              {
                "name": "ValueName",
                "value": "policy.1.0.cli_oootypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"9.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\policy.1.0.cli_oootypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"9.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1812
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "7"
              },
              {
                "name": "ValueName",
                "value": "cli_uretypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.9.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\cli_uretypes,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.9.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1813
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "8"
              },
              {
                "name": "ValueName",
                "value": "policy.1.0.cli_ure,publicKeyToken=\"ce2cb7e279207b9e\",version=\"23.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\policy.1.0.cli_ure,publicKeyToken=\"ce2cb7e279207b9e\",version=\"23.0.0.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1814
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "9"
              },
              {
                "name": "ValueName",
                "value": "cli_ure,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.23.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              },
              {
                "name": "Type",
                "value": "7",
                "pretty_value": "REG_MULTI_SZ"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\cli_ure,publicKeyToken=\"ce2cb7e279207b9e\",version=\"1.0.23.0\",culture=\"neutral\",processorArchitecture=\"MSIL\""
              }
            ],
            "repeated": 0,
            "id": 1815
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegEnumValueW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "Index",
                "value": "10"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "Type",
                "value": "0",
                "pretty_value": "REG_NONE"
              },
              {
                "name": "DataLength",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global\\"
              }
            ],
            "repeated": 0,
            "id": 1816
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              }
            ],
            "repeated": 0,
            "id": 1817
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "LoadLibraryShim_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1818
          },
          {
            "timestamp": "2026-04-25 06:56:34,001",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "LoadLibraryShim"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73ddf970"
              }
            ],
            "repeated": 0,
            "id": 1819
          },
          {
            "timestamp": "2026-04-25 06:56:34,047",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "__notification__",
            "api": "sysenter",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadIdentifier",
                "value": "6504"
              },
              {
                "name": "Module",
                "value": "KERNEL32.dll"
              },
              {
                "name": "Return Address",
                "value": "0x76ad24ac"
              }
            ],
            "repeated": 0,
            "id": 1820
          },
          {
            "timestamp": "2026-04-25 06:56:34,079",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\culture"
              },
              {
                "name": "DllBase",
                "value": "0x70ec0000"
              }
            ],
            "repeated": 0,
            "id": 1821
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Culture.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x70ec0000"
              }
            ],
            "repeated": 0,
            "id": 1822
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x70ec0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\culture.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 1823
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "culture.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x70ec0000"
              },
              {
                "name": "FunctionName",
                "value": "ConvertLangIdToCultureName"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x70ec3332"
              }
            ],
            "repeated": 0,
            "id": 1824
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "unload"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\culture"
              },
              {
                "name": "DllBase",
                "value": "0x70ec0000"
              }
            ],
            "repeated": 0,
            "id": 1825
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1826
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77f69000"
              },
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00003000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1827
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x70ec0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              }
            ],
            "repeated": 0,
            "id": 1828
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtUnmapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07910000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              }
            ],
            "repeated": 0,
            "id": 1829
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000450"
              }
            ],
            "repeated": 0,
            "id": 1830
          },
          {
            "timestamp": "2026-04-25 06:56:34,094",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ru-RU\\mscorrc.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000002"
              }
            ],
            "repeated": 0,
            "id": 1831
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x07910001",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ru\\mscorrc.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000002"
              }
            ],
            "repeated": 0,
            "id": 1832
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Globalization\\ru.nlp"
              }
            ],
            "repeated": 0,
            "id": 1833
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.mscorlib.resources_ru_b77a5c561934e089"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.mscorlib.resources_ru_b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 1834
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\5e8c75c\\2f231edf"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\5e8c75c\\2f231edf"
              }
            ],
            "repeated": 0,
            "id": 1835
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 1836
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 1837
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 1838
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 1839
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000454"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1840
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x0000041c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000454"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.Resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 1841
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x0000041c"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07970000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095c878"
              },
              {
                "name": "ViewSize",
                "value": "0x00064000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1842
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x0000041c"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07a50000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095c878"
              },
              {
                "name": "ViewSize",
                "value": "0x00064000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1843
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07970000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1844
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 1845
          },
          {
            "timestamp": "2026-04-25 06:56:34,188",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.INI"
              }
            ],
            "repeated": 0,
            "id": 1846
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fd1000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1847
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000458"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1848
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": false,
            "return": "0xffffffff80000005",
            "pretty_return": "BUFFER_OVERFLOW",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000454"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.Resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "18",
                "pretty_value": "FileAllInformation"
              },
              {
                "name": "FileInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 1849
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": false,
            "return": "0xffffffff80000005",
            "pretty_return": "BUFFER_OVERFLOW",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000458"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.Resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "18",
                "pretty_value": "FileAllInformation"
              },
              {
                "name": "FileInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 1850
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000002"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x07970000"
              }
            ],
            "repeated": 0,
            "id": 1851
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x07970000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000009"
              }
            ],
            "repeated": 0,
            "id": 1852
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x05075d86",
            "parentcaller": "0x05075b21",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000458"
              }
            ],
            "repeated": 0,
            "id": 1853
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075d86",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02883000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1854
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075d93",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x079e0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1855
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075d93",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x079e0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1856
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075d93",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x079e0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1857
          },
          {
            "timestamp": "2026-04-25 06:56:34,204",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05075d93",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x079e0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1858
          },
          {
            "timestamp": "2026-04-25 06:56:34,266",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05076000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1859
          },
          {
            "timestamp": "2026-04-25 06:56:34,266",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 5,
            "id": 1860
          },
          {
            "timestamp": "2026-04-25 06:56:34,313",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ac0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00100000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1861
          },
          {
            "timestamp": "2026-04-25 06:56:34,313",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ac0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1862
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000000",
                "pretty_value": "HKEY_CLASSES_ROOT"
              },
              {
                "name": "SubKey",
                "value": "CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32"
              },
              {
                "name": "Handle",
                "value": "0x0000044e"
              },
              {
                "name": "FullName",
                "value": "HKEY_CLASSES_ROOT\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32"
              }
            ],
            "repeated": 0,
            "id": 1863
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044e"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1864
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044e"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "Data",
                "value": "C:\\Windows\\SysWOW64\\mscoree.dll"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1865
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044e"
              }
            ],
            "repeated": 0,
            "id": 1866
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\mscoree.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 1867
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x74160000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\SysWOW64\\mscoree.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 1868
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "DllGetClassObject"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7416e450"
              }
            ],
            "repeated": 0,
            "id": 1869
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "DllGetClassObject_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1870
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "DllGetClassObject"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73de1640"
              }
            ],
            "repeated": 0,
            "id": 1871
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 1872
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              }
            ],
            "repeated": 0,
            "id": 1873
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000000",
                "pretty_value": "HKEY_CLASSES_ROOT"
              },
              {
                "name": "SubKey",
                "value": "CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server"
              },
              {
                "name": "Handle",
                "value": "0x0000044e"
              },
              {
                "name": "FullName",
                "value": "HKEY_CLASSES_ROOT\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server"
              }
            ],
            "repeated": 0,
            "id": 1874
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044e"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1875
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044e"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "Data",
                "value": "diasymreader.dll"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1876
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044e"
              }
            ],
            "repeated": 0,
            "id": 1877
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework"
              },
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework"
              }
            ],
            "repeated": 0,
            "id": 1878
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              },
              {
                "name": "ValueName",
                "value": "AlwaysReadHKCRForCLSIDs"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\AlwaysReadHKCRForCLSIDs"
              }
            ],
            "repeated": 0,
            "id": 1879
          },
          {
            "timestamp": "2026-04-25 06:56:34,360",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000044c"
              }
            ],
            "repeated": 0,
            "id": 1880
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1881
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenThreadToken"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe8c0"
              }
            ],
            "repeated": 0,
            "id": 1882
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1883
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00020008"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000458"
              }
            ],
            "repeated": 0,
            "id": 1884
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": false,
            "return": "0xffffffffc0000023",
            "pretty_return": "BUFFER_TOO_SMALL",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "25"
              },
              {
                "name": "TokenInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 1885
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "25"
              },
              {
                "name": "TokenInformation",
                "value": "\\x08\\x0f\\xca\\x00`\\x00\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x10\\x000\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1886
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1887
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetSidSubAuthorityCount"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf190"
              }
            ],
            "repeated": 0,
            "id": 1888
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1889
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1890
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetSidSubAuthority"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf030"
              }
            ],
            "repeated": 0,
            "id": 1891
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e35000"
              },
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1892
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000458"
              }
            ],
            "repeated": 0,
            "id": 1893
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SOFTWARE\\Classes\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server"
              },
              {
                "name": "Handle",
                "value": "0x00000458"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server"
              }
            ],
            "repeated": 0,
            "id": 1894
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000458"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1895
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000458"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "Data",
                "value": "diasymreader.dll"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1896
          },
          {
            "timestamp": "2026-04-25 06:56:34,376",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000458"
              }
            ],
            "repeated": 0,
            "id": 1897
          },
          {
            "timestamp": "2026-04-25 06:56:34,501",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "__notification__",
            "api": "sysenter",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadIdentifier",
                "value": "6504"
              },
              {
                "name": "Module",
                "value": "KERNEL32.dll"
              },
              {
                "name": "Return Address",
                "value": "0x76ad24ac"
              }
            ],
            "repeated": 0,
            "id": 1898
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\diasymreader"
              },
              {
                "name": "DllBase",
                "value": "0x70e40000"
              }
            ],
            "repeated": 0,
            "id": 1899
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x70e6a64e",
            "parentcaller": "0x736e1742",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1900
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050c3000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1901
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050c5000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1902
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e7138f",
            "parentcaller": "0x77e7110a",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000464"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000009",
                "pretty_value": "KEY_QUERY_VALUE|KEY_ENUMERATE_SUB_KEYS"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              }
            ],
            "repeated": 0,
            "id": 1903
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e713ac",
            "parentcaller": "0x77e7110a",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000464"
              },
              {
                "name": "ValueName",
                "value": "ResourcePolicies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies"
              }
            ],
            "repeated": 0,
            "id": 1904
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e713c2",
            "parentcaller": "0x77e7110a",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              }
            ],
            "repeated": 0,
            "id": 1905
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e6f04b",
            "parentcaller": "0x77e6ef40",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x079f0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00008000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1906
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e6f092",
            "parentcaller": "0x77e6ef40",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x079f0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1907
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\diasymreader.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x70e40000"
              }
            ],
            "repeated": 0,
            "id": 1908
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x70e40000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\diasymreader.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 1909
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "diasymreader.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x70e40000"
              },
              {
                "name": "FunctionName",
                "value": "DllGetClassObjectInternal"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x70e521e1"
              }
            ],
            "repeated": 0,
            "id": 1910
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 1911
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              }
            ],
            "repeated": 0,
            "id": 1912
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050c7000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1913
          },
          {
            "timestamp": "2026-04-25 06:56:34,563",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1914
          },
          {
            "timestamp": "2026-04-25 06:56:34,579",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1915
          },
          {
            "timestamp": "2026-04-25 06:56:34,579",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050c8000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1916
          },
          {
            "timestamp": "2026-04-25 06:56:34,641",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "Buffer",
                "value": "MZ\\x90\\x00\\x03\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\xff\\xff\\x00\\x00\\xb8\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x00\\x00\\x00\\x0e\\x1f\\xba\\x0e\\x00\\xb4\t\\xcd!\\xb8\\x01L\\xcd!This program cannot be run in DOS mode.\r\r\n$\\x00\\x00\\x00\\x00\\x00\\x00\\x00PE\\x00\\x00L\\x01\\x03\\x00VbGb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xe0\\x00\\x0e!\\x0b\\x01\\x08\\x00\\x00 =\\x00\\x00`\\x08\\x00\\x00\\x00\\x00\\x00n6=\\x00\\x00 \\x00\\x00\\x00@=\\x00\\x00\\x00\\x0cy\\x00 \\x00\\x00\\x00\\x10\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xc0E\\x00\\x00\\x10\\x00\\x00(\\xdcE\\x00\\x03\\x00@\\x04\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "4096"
              }
            ],
            "repeated": 0,
            "id": 1917
          },
          {
            "timestamp": "2026-04-25 06:56:34,641",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x80\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1918
          },
          {
            "timestamp": "2026-04-25 06:56:34,641",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "Buffer",
                "value": "PE\\x00\\x00L\\x01\\x03\\x00VbGb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xe0\\x00\\x0e!\\x0b\\x01\\x08\\x00\\x00 =\\x00\\x00`\\x08\\x00\\x00\\x00\\x00\\x00n6=\\x00\\x00 \\x00\\x00\\x00@=\\x00\\x00\\x00\\x0cy\\x00 \\x00\\x00\\x00\\x10\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xc0E\\x00\\x00\\x10\\x00\\x00(\\xdcE\\x00\\x03\\x00@\\x04\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x1c6=\\x00O\\x00\\x00\\x00\\x00@=\\x00tK\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xa0E\\x00\\x0c\\x00\\x00\\x00\\xb85=\\x00\\x1c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x08 \\x00\\x00H\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00.text\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "512"
              }
            ],
            "repeated": 0,
            "id": 1919
          },
          {
            "timestamp": "2026-04-25 06:56:34,641",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "x\\x01\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1920
          },
          {
            "timestamp": "2026-04-25 06:56:34,641",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "Buffer",
                "value": ".text\\x00\\x00\\x00t\\x16=\\x00\\x00 \\x00\\x00\\x00 =\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\x00`.rsrc\\x00\\x00\\x00tK\\x08\\x00\\x00@=\\x00\\x00P\\x08\\x00\\x000=\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00@.reloc\\x00\\x00\\x0c\\x00\\x00\\x00\\x00\\xa0E\\x00\\x00\\x10\\x00\\x00\\x00\\x80E\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00B\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "512"
              }
            ],
            "repeated": 0,
            "id": 1921
          },
          {
            "timestamp": "2026-04-25 06:56:34,641",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\xb8%=\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1922
          },
          {
            "timestamp": "2026-04-25 06:56:34,766",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "Buffer",
                "value": "\\x00\\x00\\x00\\x00VbGb\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00%\\x00\\x00\\x00\\xd45=\\x00\\xd4%=\\x00RSDSy\\x05\\x08\\x99\\xd7\\xa0\\xc5@\\x97\\xfd&7\\xdf\\xe0\\xee\\x95\\x01\\x00\\x00\\x00mscorlib.pdb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00D6=\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00^6=\\x00\\x00 \\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00P6=\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00_CorDllMain\\x00mscoree.dll\\x00\\x00\\x00\\x00\\x00\\xff%\\x00 \\x0cy\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "512"
              }
            ],
            "repeated": 0,
            "id": 1923
          },
          {
            "timestamp": "2026-04-25 06:56:34,782",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\xd4%=\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1924
          },
          {
            "timestamp": "2026-04-25 06:56:34,782",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
              },
              {
                "name": "Buffer",
                "value": "RSDSy\\x05\\x08\\x99\\xd7\\xa0\\xc5@\\x97\\xfd&7\\xdf\\xe0\\xee\\x95\\x01\\x00\\x00\\x00mscorlib.pdb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00D6=\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00^6=\\x00\\x00 \\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00P6=\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00_CorDllMain\\x00mscoree.dll\\x00\\x00\\x00\\x00\\x00\\xff%\\x00 \\x0cy\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "512"
              }
            ],
            "repeated": 0,
            "id": 1925
          },
          {
            "timestamp": "2026-04-25 06:56:34,782",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.pdb"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1926
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x050ca000"
              },
              {
                "name": "RegionSize",
                "value": "0x00005000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1927
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\symbols\\dll\\mscorlib.pdb"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1928
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\dll\\mscorlib.pdb"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1929
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\mscorlib.pdb"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "no"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1930
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000460"
              }
            ],
            "repeated": 0,
            "id": 1931
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000000",
                "pretty_value": "HKEY_CLASSES_ROOT"
              },
              {
                "name": "SubKey",
                "value": "CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32"
              },
              {
                "name": "Handle",
                "value": "0x00000462"
              },
              {
                "name": "FullName",
                "value": "HKEY_CLASSES_ROOT\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32"
              }
            ],
            "repeated": 0,
            "id": 1932
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000462"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1933
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000462"
              },
              {
                "name": "ValueName",
                "value": ""
              },
              {
                "name": "Data",
                "value": "C:\\Windows\\SysWOW64\\mscoree.dll"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)"
              }
            ],
            "repeated": 0,
            "id": 1934
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000462"
              }
            ],
            "repeated": 0,
            "id": 1935
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\SysWOW64\\mscoree.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 1936
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x74160000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\SysWOW64\\mscoree.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 1937
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "DllGetClassObject"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7416e450"
              }
            ],
            "repeated": 0,
            "id": 1938
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 1939
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000234"
              }
            ],
            "repeated": 0,
            "id": 1940
          },
          {
            "timestamp": "2026-04-25 06:56:34,829",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.PDB"
              }
            ],
            "repeated": 0,
            "id": 1941
          },
          {
            "timestamp": "2026-04-25 06:56:34,907",
            "thread_id": "6504",
            "caller": "0x77261999",
            "parentcaller": "0x772616ce",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1942
          },
          {
            "timestamp": "2026-04-25 06:56:34,907",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1943
          },
          {
            "timestamp": "2026-04-25 06:56:34,907",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "Buffer",
                "value": "MZ\\x90\\x00\\x03\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\xff\\xff\\x00\\x00\\xb8\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x00\\x00\\x00\\x0e\\x1f\\xba\\x0e\\x00\\xb4\t\\xcd!\\xb8\\x01L\\xcd!This program cannot be run in DOS mode.\r\r\n$\\x00\\x00\\x00\\x00\\x00\\x00\\x00PE\\x00\\x00L\\x01\\x03\\x00\\xa1'\\xe9T\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xe0\\x00\\x0e\\x01\\x0b\\x01\\x06\\x00\\x00\\xc8\\x01\\x00\\x00`\\x01\\x00\\x00\\x00\\x00\\x00\\x92\\xe7\\x01\\x00\\x00 \\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00@\\x00\\x00 \\x00\\x00\\x00\\x02\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x03\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "4096"
              }
            ],
            "repeated": 0,
            "id": 1944
          },
          {
            "timestamp": "2026-04-25 06:56:34,907",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "FileInformationClass",
                "value": "14",
                "pretty_value": "FilePositionInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x80\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 1945
          },
          {
            "timestamp": "2026-04-25 06:56:34,907",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000460"
              },
              {
                "name": "HandleName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
              },
              {
                "name": "Buffer",
                "value": "PE\\x00\\x00L\\x01\\x03\\x00\\xa1'\\xe9T\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xe0\\x00\\x0e\\x01\\x0b\\x01\\x06\\x00\\x00\\xc8\\x01\\x00\\x00`\\x01\\x00\\x00\\x00\\x00\\x00\\x92\\xe7\\x01\\x00\\x00 \\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00@\\x00\\x00 \\x00\\x00\\x00\\x02\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x80\\x03\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x008\\xe7\\x01\\x00W\\x00\\x00\\x00\\x00 \\x02\\x00\\xcc]\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x02\\x00\\x0c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x08 \\x00\\x00H\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00.text\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "512"
              }
            ],
            "repeated": 0,
            "id": 1946
          },
          {
            "timestamp": "2026-04-25 06:56:34,907",
            "thread_id": "6504",
            "caller": "0x05076260",
            "parentcaller": "0x05075daa",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000460"
              }
            ],
            "repeated": 0,
            "id": 1947
          },
          {
            "timestamp": "2026-04-25 06:56:34,985",
            "thread_id": "6504",
            "caller": "0x05076271",
            "parentcaller": "0x05075daa",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05572000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1948
          },
          {
            "timestamp": "2026-04-25 06:56:34,985",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x0507629c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 5,
            "id": 1949
          },
          {
            "timestamp": "2026-04-25 06:56:35,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050765e2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "DeleteFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1950
          },
          {
            "timestamp": "2026-04-25 06:56:35,079",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050765e2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "DeleteFileA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3160"
              }
            ],
            "repeated": 0,
            "id": 1951
          },
          {
            "timestamp": "2026-04-25 06:56:35,157",
            "thread_id": "6504",
            "caller": "0x07880dd1",
            "parentcaller": "0x050765e2",
            "category": "filesystem",
            "api": "DeleteFileA",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe:Zone.Identifier"
              }
            ],
            "repeated": 0,
            "id": 1952
          },
          {
            "timestamp": "2026-04-25 06:56:35,282",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05076934",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "SetKernelObjectSecurity"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ec0780"
              }
            ],
            "repeated": 0,
            "id": 1953
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetSystemInfo"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad1910"
              }
            ],
            "repeated": 0,
            "id": 1954
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x07880f2e",
            "parentcaller": "0x02882420",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 1955
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 1956
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateIoCompletionPort"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad22a0"
              }
            ],
            "repeated": 0,
            "id": 1957
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "PostQueuedCompletionStatus"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2260"
              }
            ],
            "repeated": 0,
            "id": 1958
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ntdll.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 1959
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x77e40000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "ntdll.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1960
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtQueryInformationThread"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb2ce0"
              }
            ],
            "repeated": 0,
            "id": 1961
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtQuerySystemInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb2df0"
              }
            ],
            "repeated": 0,
            "id": 1962
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1963
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 1964
          },
          {
            "timestamp": "2026-04-25 06:56:35,297",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtGetCurrentProcessorNumber"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb39c0"
              }
            ],
            "repeated": 0,
            "id": 1965
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000478"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00c94f78"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "6220"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 1966
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x00000478",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00c94f78"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "6220"
              }
            ],
            "repeated": 0,
            "id": 1967
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6504",
            "caller": "0x05076ab5",
            "parentcaller": "0x05070833",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000478"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "6220"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 1968
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 1969
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1970
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 1971
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 1972
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07bc1000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1973
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 1974
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 1975
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000478"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xd0r\\x00T\\x19\\x00\\x00L\\x18\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6220"
              }
            ],
            "repeated": 0,
            "id": 1976
          },
          {
            "timestamp": "2026-04-25 06:56:35,329",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1977
          },
          {
            "timestamp": "2026-04-25 06:56:35,376",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 1978
          },
          {
            "timestamp": "2026-04-25 06:56:35,376",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SwitchToThread"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac7cc0"
              }
            ],
            "repeated": 0,
            "id": 1979
          },
          {
            "timestamp": "2026-04-25 06:56:35,376",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 1980
          },
          {
            "timestamp": "2026-04-25 06:56:35,376",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070839",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07892000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1981
          },
          {
            "timestamp": "2026-04-25 06:56:35,391",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1982
          },
          {
            "timestamp": "2026-04-25 06:56:35,391",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x05076b4e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1983
          },
          {
            "timestamp": "2026-04-25 06:56:35,391",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x05076b4e",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1984
          },
          {
            "timestamp": "2026-04-25 06:56:35,391",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x05076b76",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1985
          },
          {
            "timestamp": "2026-04-25 06:56:35,391",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x05076b76",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1986
          },
          {
            "timestamp": "2026-04-25 06:56:35,391",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076b76",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 1987
          },
          {
            "timestamp": "2026-04-25 06:56:35,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070839",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1988
          },
          {
            "timestamp": "2026-04-25 06:56:35,454",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070839",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1989
          },
          {
            "timestamp": "2026-04-25 06:56:35,454",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05076c24",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\catalog.dat"
              }
            ],
            "repeated": 0,
            "id": 1990
          },
          {
            "timestamp": "2026-04-25 06:56:35,469",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507083f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1991
          },
          {
            "timestamp": "2026-04-25 06:56:35,469",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507083f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05077000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1992
          },
          {
            "timestamp": "2026-04-25 06:56:35,469",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507083f",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 1993
          },
          {
            "timestamp": "2026-04-25 06:56:35,469",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05076fdc",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\storage.dat"
              }
            ],
            "repeated": 0,
            "id": 1994
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0503f000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 1995
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\4ecde57e\\31d9ddbb"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\4ecde57e\\31d9ddbb"
              }
            ],
            "repeated": 0,
            "id": 1996
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 1997
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ClientPlugin.DLL"
              }
            ],
            "repeated": 0,
            "id": 1998
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ClientPlugin/ClientPlugin.DLL"
              }
            ],
            "repeated": 0,
            "id": 1999
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 2000
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ClientPlugin.EXE"
              }
            ],
            "repeated": 0,
            "id": 2001
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ClientPlugin/ClientPlugin.EXE"
              }
            ],
            "repeated": 0,
            "id": 2002
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00cb0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00025000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 2003
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin.dll"
              }
            ],
            "repeated": 0,
            "id": 2004
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin\\ClientPlugin.dll"
              }
            ],
            "repeated": 0,
            "id": 2005
          },
          {
            "timestamp": "2026-04-25 06:56:35,610",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin.exe"
              }
            ],
            "repeated": 0,
            "id": 2006
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin\\ClientPlugin.exe"
              }
            ],
            "repeated": 0,
            "id": 2007
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507084e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00cb0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00025000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2008
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2009
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2010
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2011
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000484"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0007",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_WRITE"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 2012
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000484"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cc0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095b1f4"
              },
              {
                "name": "ViewSize",
                "value": "0x00005000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2013
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000484"
              }
            ],
            "repeated": 0,
            "id": 2014
          },
          {
            "timestamp": "2026-04-25 06:56:35,626",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2015
          },
          {
            "timestamp": "2026-04-25 06:56:35,641",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07893000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2016
          },
          {
            "timestamp": "2026-04-25 06:56:35,641",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2017
          },
          {
            "timestamp": "2026-04-25 06:56:35,641",
            "thread_id": "6504",
            "caller": "0x050775a8",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2018
          },
          {
            "timestamp": "2026-04-25 06:56:35,672",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05077ad2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ce0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2019
          },
          {
            "timestamp": "2026-04-25 06:56:35,672",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05077ad2",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ce0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2020
          },
          {
            "timestamp": "2026-04-25 06:56:35,672",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507771e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ce0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2021
          },
          {
            "timestamp": "2026-04-25 06:56:35,672",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507771e",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ce0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2022
          },
          {
            "timestamp": "2026-04-25 06:56:35,672",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x05077cf3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 2023
          },
          {
            "timestamp": "2026-04-25 06:56:35,672",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05077d2a",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\settings.bin"
              }
            ],
            "repeated": 0,
            "id": 2024
          },
          {
            "timestamp": "2026-04-25 06:56:35,672",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 2025
          },
          {
            "timestamp": "2026-04-25 06:56:35,751",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05078000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2026
          },
          {
            "timestamp": "2026-04-25 06:56:35,751",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ce0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2027
          },
          {
            "timestamp": "2026-04-25 06:56:35,751",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ce0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2028
          },
          {
            "timestamp": "2026-04-25 06:56:35,751",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x05077cf3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 2029
          },
          {
            "timestamp": "2026-04-25 06:56:35,751",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x05077d2a",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\settings.bak"
              }
            ],
            "repeated": 0,
            "id": 2030
          },
          {
            "timestamp": "2026-04-25 06:56:35,751",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 2031
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "6504",
            "caller": "0x050781d6",
            "parentcaller": "0x05077732",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000488"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x737aae99"
              },
              {
                "name": "Parameter",
                "value": "0x0095e41c"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "7412"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 2032
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "6504",
            "caller": "0x050781d6",
            "parentcaller": "0x05077732",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x00000488",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x737aae99"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x0095e41c"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "7412"
              }
            ],
            "repeated": 0,
            "id": 2033
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "6504",
            "caller": "0x050781d6",
            "parentcaller": "0x05077732",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000484"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 2034
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00e43000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2035
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 2036
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2037
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2038
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x77271454",
            "parentcaller": "0x7380c4c9",
            "category": "system",
            "api": "NtDuplicateObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SourceProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "SourceHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "TargetProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "TargetHandle",
                "value": "0x00000480"
              },
              {
                "name": "Options",
                "value": "0x00000002"
              }
            ],
            "repeated": 0,
            "id": 2039
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x7726269a",
            "parentcaller": "0x73a8acc4",
            "category": "system",
            "api": "NtClose",
            "status": false,
            "return": "0xffffffffc0000008",
            "pretty_return": "INVALID_HANDLE",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2040
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 2041
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07d21000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2042
          },
          {
            "timestamp": "2026-04-25 06:56:35,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 1,
            "id": 2043
          },
          {
            "timestamp": "2026-04-25 06:56:35,813",
            "thread_id": "6504",
            "caller": "0x050781d6",
            "parentcaller": "0x05077732",
            "category": "threading",
            "api": "NtQueueApcThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "ThreadId",
                "value": "7412"
              },
              {
                "name": "ThreadHandle",
                "value": "0x00000488"
              },
              {
                "name": "ApcRoutine",
                "value": "0x77e6c070"
              },
              {
                "name": "Module",
                "value": "ntdll.dll"
              },
              {
                "name": "Name",
                "value": "RtlDispatchAPC"
              }
            ],
            "repeated": 1,
            "id": 2044
          },
          {
            "timestamp": "2026-04-25 06:56:35,829",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x05078331",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 2045
          },
          {
            "timestamp": "2026-04-25 06:56:35,829",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07e20000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2046
          },
          {
            "timestamp": "2026-04-25 06:56:35,829",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07894000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2047
          },
          {
            "timestamp": "2026-04-25 06:56:35,829",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2048
          },
          {
            "timestamp": "2026-04-25 06:56:35,829",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07e20000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2049
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507842b",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f60000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2050
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507842b",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f70000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2051
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507842b",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f70000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2052
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507842b",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f60000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2053
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x05078e70",
            "parentcaller": "0x050787d1",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2054
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x05078e70",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000004b4"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0007",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_WRITE"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 2055
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x05078e70",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000004b4"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f60000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095df24"
              },
              {
                "name": "ViewSize",
                "value": "0x00019000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2056
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x05078e70",
            "parentcaller": "0x050787d1",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000004b4"
              }
            ],
            "repeated": 0,
            "id": 2057
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x05078e70",
            "parentcaller": "0x050787d1",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2058
          },
          {
            "timestamp": "2026-04-25 06:56:35,844",
            "thread_id": "6504",
            "caller": "0x05078e70",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd3000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2059
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6504",
            "caller": "0x05078e70",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd4000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2060
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "7412",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00c950c8"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 2061
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "7412",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000004b0",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00c950c8"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              }
            ],
            "repeated": 0,
            "id": 2062
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "7412",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 2063
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "1000"
              }
            ],
            "repeated": 0,
            "id": 2064
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 2065
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2066
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2067
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 2068
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07e61000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fb000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2069
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2070
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2071
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6948",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x000s\\x00T\\x19\\x00\\x00$\\x1b\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              }
            ],
            "repeated": 0,
            "id": 2072
          },
          {
            "timestamp": "2026-04-25 06:56:35,860",
            "thread_id": "6504",
            "caller": "0x05078e79",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07895000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2073
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05079000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2074
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd5000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2075
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x05078fcf",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2076
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x05078fcf",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2077
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2078
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2079
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6504",
            "caller": "0x05078e79",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07896000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2080
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6504",
            "caller": "0x05078e79",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd6000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2081
          },
          {
            "timestamp": "2026-04-25 06:56:35,876",
            "thread_id": "6504",
            "caller": "0x05078e79",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07897000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2082
          },
          {
            "timestamp": "2026-04-25 06:56:35,891",
            "thread_id": "6504",
            "caller": "0x05078e79",
            "parentcaller": "0x050787d1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0289e000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2083
          },
          {
            "timestamp": "2026-04-25 06:56:35,891",
            "thread_id": "6504",
            "caller": "0x05079444",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ac2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2084
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x05079444",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ac3000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2085
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507939d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2086
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507939d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f90000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2087
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507939d",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f90000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2088
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507939d",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2089
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x0507968c",
            "parentcaller": "0x0507939d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ac4000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2090
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x0507968c",
            "parentcaller": "0x0507939d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05582000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2091
          },
          {
            "timestamp": "2026-04-25 06:56:35,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079f06",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd7000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2092
          },
          {
            "timestamp": "2026-04-25 06:56:35,922",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079f41",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0507a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2093
          },
          {
            "timestamp": "2026-04-25 06:56:35,922",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507985f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2094
          },
          {
            "timestamp": "2026-04-25 06:56:35,922",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507985f",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2095
          },
          {
            "timestamp": "2026-04-25 06:56:35,969",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050792bf",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetUserName"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2096
          },
          {
            "timestamp": "2026-04-25 06:56:35,969",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x050792bf",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "GetUserNameW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebf410"
              }
            ],
            "repeated": 0,
            "id": 2097
          },
          {
            "timestamp": "2026-04-25 06:56:35,969",
            "thread_id": "6504",
            "caller": "0x0288afec",
            "parentcaller": "0x050792bf",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 2098
          },
          {
            "timestamp": "2026-04-25 06:56:35,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "844"
              }
            ],
            "repeated": 0,
            "id": 2099
          },
          {
            "timestamp": "2026-04-25 06:56:35,985",
            "thread_id": "6504",
            "caller": "0x0507ae7e",
            "parentcaller": "0x0507adf3",
            "category": "threading",
            "api": "NtQueueApcThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "ThreadId",
                "value": "7412"
              },
              {
                "name": "ThreadHandle",
                "value": "0x00000488"
              },
              {
                "name": "ApcRoutine",
                "value": "0x77e6c070"
              },
              {
                "name": "Module",
                "value": "ntdll.dll"
              },
              {
                "name": "Name",
                "value": "RtlDispatchAPC"
              }
            ],
            "repeated": 1,
            "id": 2100
          },
          {
            "timestamp": "2026-04-25 06:56:35,985",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079320",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2101
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0507b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2102
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079320",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07898000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2103
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f90000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2104
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f90000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2105
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079320",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2106
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b137",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2107
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b137",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2108
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b22d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2109
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b22d",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2110
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b1ce",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2111
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b1ce",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2112
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b327",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2113
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b327",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd8000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2114
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b327",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2115
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b3c1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2116
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b3c1",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2117
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b1d6",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2118
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b1d6",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2119
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs\\cape"
              }
            ],
            "repeated": 0,
            "id": 2120
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs"
              }
            ],
            "repeated": 0,
            "id": 2121
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A"
              }
            ],
            "repeated": 0,
            "id": 2122
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Roaming"
              }
            ],
            "repeated": 0,
            "id": 2123
          },
          {
            "timestamp": "2026-04-25 06:56:36,001",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData"
              }
            ],
            "repeated": 0,
            "id": 2124
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape"
              }
            ],
            "repeated": 0,
            "id": 2125
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x07880994",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users"
              }
            ],
            "repeated": 0,
            "id": 2126
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x07880a59",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "CreateDirectoryW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DirectoryName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs"
              }
            ],
            "repeated": 0,
            "id": 2127
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x07880a59",
            "parentcaller": "0x0507932f",
            "category": "filesystem",
            "api": "CreateDirectoryW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "DirectoryName",
                "value": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs\\cape"
              }
            ],
            "repeated": 0,
            "id": 2128
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2129
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\a054161\\46043f61"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\a054161\\46043f61"
              }
            ],
            "repeated": 0,
            "id": 2130
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 2131
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/Lzma#.DLL"
              }
            ],
            "repeated": 0,
            "id": 2132
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/Lzma#/Lzma#.DLL"
              }
            ],
            "repeated": 0,
            "id": 2133
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 2134
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/Lzma#.EXE"
              }
            ],
            "repeated": 0,
            "id": 2135
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/Lzma#/Lzma#.EXE"
              }
            ],
            "repeated": 0,
            "id": 2136
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00cb9000"
              },
              {
                "name": "RegionSize",
                "value": "0x0001c000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 2137
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#.dll"
              }
            ],
            "repeated": 0,
            "id": 2138
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#\\Lzma#.dll"
              }
            ],
            "repeated": 0,
            "id": 2139
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#.exe"
              }
            ],
            "repeated": 0,
            "id": 2140
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#\\Lzma#.exe"
              }
            ],
            "repeated": 0,
            "id": 2141
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00cb9000"
              },
              {
                "name": "RegionSize",
                "value": "0x0001c000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2142
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2143
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "7412",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b4"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x737bcbab"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "2616"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 2144
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "7412",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000004b4",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x737bcbab"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "2616"
              }
            ],
            "repeated": 0,
            "id": 2145
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "7412",
            "caller": "0x7727d303",
            "parentcaller": "0x73855d44",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b4"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "2616"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 2146
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "7412",
            "caller": "0x7726269a",
            "parentcaller": "0x73855d4b",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000004b4"
              }
            ],
            "repeated": 0,
            "id": 2147
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2148
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2149
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "2616",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 2150
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "2616",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2151
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "2616",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2152
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2153
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b5a3",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2154
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b5a3",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2155
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b622",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2156
          },
          {
            "timestamp": "2026-04-25 06:56:36,016",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b622",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2157
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b701",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetForegroundWindow"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d515b0"
              }
            ],
            "repeated": 0,
            "id": 2158
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05592000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2159
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b740",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowThreadProcessId"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4a660"
              }
            ],
            "repeated": 0,
            "id": 2160
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\219e9581\\3b405a35"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\219e9581\\3b405a35"
              }
            ],
            "repeated": 0,
            "id": 2161
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 2162
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/SurveillanceExClientPlugin.resources.DLL"
              }
            ],
            "repeated": 0,
            "id": 2163
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/SurveillanceExClientPlugin.resources/SurveillanceExClientPlugin.resources.DLL"
              }
            ],
            "repeated": 0,
            "id": 2164
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 2165
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/SurveillanceExClientPlugin.resources.EXE"
              }
            ],
            "repeated": 0,
            "id": 2166
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru-RU/SurveillanceExClientPlugin.resources/SurveillanceExClientPlugin.resources.EXE"
              }
            ],
            "repeated": 0,
            "id": 2167
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 2168
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 2169
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources.exe"
              }
            ],
            "repeated": 0,
            "id": 2170
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.exe"
              }
            ],
            "repeated": 0,
            "id": 2171
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\219e9581\\26de983b"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\219e9581\\26de983b"
              }
            ],
            "repeated": 0,
            "id": 2172
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 2173
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru/SurveillanceExClientPlugin.resources.DLL"
              }
            ],
            "repeated": 0,
            "id": 2174
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru/SurveillanceExClientPlugin.resources/SurveillanceExClientPlugin.resources.DLL"
              }
            ],
            "repeated": 0,
            "id": 2175
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/"
              }
            ],
            "repeated": 0,
            "id": 2176
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru/SurveillanceExClientPlugin.resources.EXE"
              }
            ],
            "repeated": 0,
            "id": 2177
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "UrlCanonicalizeW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Url",
                "value": "C:/Users/cape/AppData/Local/Temp/ru/SurveillanceExClientPlugin.resources/SurveillanceExClientPlugin.resources.EXE"
              }
            ],
            "repeated": 0,
            "id": 2178
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 2179
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.dll"
              }
            ],
            "repeated": 0,
            "id": 2180
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources.exe"
              }
            ],
            "repeated": 0,
            "id": 2181
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5a3",
            "parentcaller": "0x04fe0626",
            "category": "filesystem",
            "api": "NtQueryAttributesFile",
            "status": false,
            "return": "0xffffffffc000003a",
            "pretty_return": "OBJECT_PATH_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.exe"
              }
            ],
            "repeated": 0,
            "id": 2182
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5aa",
            "parentcaller": "0x04fe0626",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2183
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5aa",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000004c0"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0007",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_WRITE"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 2184
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5aa",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x000004c0"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080d0000"
              },
              {
                "name": "SectionOffset",
                "value": "0x0095ae40"
              },
              {
                "name": "ViewSize",
                "value": "0x00003000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2185
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5aa",
            "parentcaller": "0x04fe0626",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000004c0"
              }
            ],
            "repeated": 0,
            "id": 2186
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5aa",
            "parentcaller": "0x04fe0626",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2187
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x0507b5aa",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cd9000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2188
          },
          {
            "timestamp": "2026-04-25 06:56:36,032",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05079335",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2189
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b915",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07899000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2190
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x0507bdda",
            "parentcaller": "0x0507bda6",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06590000"
              },
              {
                "name": "RegionSize",
                "value": "0x00800000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2191
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507be28",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cda000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2192
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x0507bef6",
            "parentcaller": "0x0507be28",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x055a2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2193
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507bf4d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0507c000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2194
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b9e8",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2195
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b9e8",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080e0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2196
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b9e8",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x080e0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2197
          },
          {
            "timestamp": "2026-04-25 06:56:36,047",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b9e8",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2198
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507c220",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0507d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2199
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507ca3b",
            "parentcaller": "0x0507c6f1",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x055b2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2200
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b9f3",
            "parentcaller": "0x0507b813",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x055c2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2201
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000220"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 2202
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "threading",
            "api": "NtSuspendThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "SuspendCount",
                "value": "0"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 2203
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "threading",
            "api": "NtGetContextThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "Eax",
                "value": "0x72448d48"
              },
              {
                "name": "Ebx",
                "value": "0x0557bff4"
              },
              {
                "name": "Ecx",
                "value": "0x00001388"
              },
              {
                "name": "Edx",
                "value": "0x00000000"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              }
            ],
            "repeated": 0,
            "id": 2204
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "threading",
            "api": "NtGetContextThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "InstructionPointer",
                "value": "0x7298418c"
              },
              {
                "name": "Eax",
                "value": "0x72448d48"
              },
              {
                "name": "Ebx",
                "value": "0x0557bff4"
              },
              {
                "name": "Ecx",
                "value": "0x00001388"
              },
              {
                "name": "Edx",
                "value": "0x00000000"
              },
              {
                "name": "Esp",
                "value": "0x07f5f8e8"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              }
            ],
            "repeated": 0,
            "id": 2205
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 2206
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2207
          },
          {
            "timestamp": "2026-04-25 06:56:36,063",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000025c"
              },
              {
                "name": "Milliseconds",
                "value": "250"
              }
            ],
            "repeated": 0,
            "id": 2208
          },
          {
            "timestamp": "2026-04-25 06:56:36,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2209
          },
          {
            "timestamp": "2026-04-25 06:56:36,110",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000033c"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 2210
          },
          {
            "timestamp": "2026-04-25 06:56:36,110",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "kernel32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 2211
          },
          {
            "timestamp": "2026-04-25 06:56:36,110",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GlobalMemoryStatusEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad1de0"
              }
            ],
            "repeated": 0,
            "id": 2212
          },
          {
            "timestamp": "2026-04-25 06:56:36,110",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "misc",
            "api": "GlobalMemoryStatusEx",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "MemoryLoad",
                "value": "24"
              },
              {
                "name": "TotalPhysicalMB",
                "value": "8191"
              }
            ],
            "repeated": 0,
            "id": 2213
          },
          {
            "timestamp": "2026-04-25 06:56:36,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2214
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06518000"
              },
              {
                "name": "RegionSize",
                "value": "0x00041000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2215
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "6504",
            "caller": "0x0507b85d",
            "parentcaller": "0x05079335",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x065b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x007e0000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 2216
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x73baf621",
            "parentcaller": "0x72dda26a",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c621f8"
              }
            ],
            "repeated": 0,
            "id": 2217
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x73baf621",
            "parentcaller": "0x72dda26a",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c627f8"
              }
            ],
            "repeated": 0,
            "id": 2218
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x72e13ec7",
            "parentcaller": "0x73781b8c",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              }
            ],
            "repeated": 0,
            "id": 2219
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x73baf621",
            "parentcaller": "0x72dda26a",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c61fb8"
              }
            ],
            "repeated": 0,
            "id": 2220
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x72e13ec7",
            "parentcaller": "0x73781b8c",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000414"
              }
            ],
            "repeated": 0,
            "id": 2221
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x73baf621",
            "parentcaller": "0x72dda26a",
            "category": "crypto",
            "api": "CryptDestroyHash",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptHash",
                "value": "0x00c61e38"
              }
            ],
            "repeated": 0,
            "id": 2222
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x72e13ec7",
            "parentcaller": "0x73781b8c",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000410"
              }
            ],
            "repeated": 0,
            "id": 2223
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2224
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000348"
              },
              {
                "name": "Milliseconds",
                "value": "2000"
              }
            ],
            "repeated": 0,
            "id": 2225
          },
          {
            "timestamp": "2026-04-25 06:56:36,251",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x0507b027",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2226
          },
          {
            "timestamp": "2026-04-25 06:56:36,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2227
          },
          {
            "timestamp": "2026-04-25 06:56:36,360",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d5c6",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cdb000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2228
          },
          {
            "timestamp": "2026-04-25 06:56:36,360",
            "thread_id": "6504",
            "caller": "0x0507d6d2",
            "parentcaller": "0x0507d5f7",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2229
          },
          {
            "timestamp": "2026-04-25 06:56:36,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 2,
            "id": 2230
          },
          {
            "timestamp": "2026-04-25 06:56:36,532",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc0f",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2231
          },
          {
            "timestamp": "2026-04-25 06:56:36,532",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2232
          },
          {
            "timestamp": "2026-04-25 06:56:36,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2233
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "LookupPrivilegeValue"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2234
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "LookupPrivilegeValueW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76eba000"
              }
            ],
            "repeated": 0,
            "id": 2235
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2236
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x0788109c",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LookupPrivilegeValueW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "SystemName",
                "value": ""
              },
              {
                "name": "PrivilegeName",
                "value": "SeDebugPrivilege"
              }
            ],
            "repeated": 0,
            "id": 2237
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentProcess"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2e80"
              }
            ],
            "repeated": 0,
            "id": 2238
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessToken"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebea30"
              }
            ],
            "repeated": 0,
            "id": 2239
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessTokenW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2240
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x078811f0",
            "parentcaller": "0x02882420",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000020"
              },
              {
                "name": "TokenHandle",
                "value": "0x000004dc"
              }
            ],
            "repeated": 0,
            "id": 2241
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "AdjustTokenPrivileges"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebfe40"
              }
            ],
            "repeated": 0,
            "id": 2242
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "AdjustTokenPrivilegesW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2243
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CloseHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2ee0"
              }
            ],
            "repeated": 0,
            "id": 2244
          },
          {
            "timestamp": "2026-04-25 06:56:36,704",
            "thread_id": "6948",
            "caller": "0x07881372",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000004dc"
              }
            ],
            "repeated": 0,
            "id": 2245
          },
          {
            "timestamp": "2026-04-25 06:56:36,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "31"
              }
            ],
            "repeated": 0,
            "id": 2246
          },
          {
            "timestamp": "2026-04-25 06:56:36,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "LdrLoadDll",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\psapi.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2247
          },
          {
            "timestamp": "2026-04-25 06:56:36,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\psapi.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 2248
          },
          {
            "timestamp": "2026-04-25 06:56:36,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\psapi"
              },
              {
                "name": "DllBase",
                "value": "0x76a70000"
              }
            ],
            "repeated": 0,
            "id": 2249
          },
          {
            "timestamp": "2026-04-25 06:56:36,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2250
          },
          {
            "timestamp": "2026-04-25 06:56:36,860",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "psapi.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76a70000"
              }
            ],
            "repeated": 0,
            "id": 2251
          },
          {
            "timestamp": "2026-04-25 06:56:36,860",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76a70000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "psapi.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2252
          },
          {
            "timestamp": "2026-04-25 06:56:36,860",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "psapi.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76a70000"
              },
              {
                "name": "FunctionName",
                "value": "EnumProcesses"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76a713c0"
              }
            ],
            "repeated": 0,
            "id": 2253
          },
          {
            "timestamp": "2026-04-25 06:56:36,860",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b027",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "psapi.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76a70000"
              },
              {
                "name": "FunctionName",
                "value": "EnumProcessesW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2254
          },
          {
            "timestamp": "2026-04-25 06:56:36,860",
            "thread_id": "6948",
            "caller": "0x0788142c",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "K32EnumProcesses",
            "status": true,
            "return": "0x00000001",
            "arguments": [],
            "repeated": 0,
            "id": 2255
          },
          {
            "timestamp": "2026-04-25 06:56:36,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 2,
            "id": 2256
          },
          {
            "timestamp": "2026-04-25 06:56:37,047",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2257
          },
          {
            "timestamp": "2026-04-25 06:56:37,047",
            "thread_id": "2616",
            "caller": "0x77e6f695",
            "parentcaller": "0x77e87aa4",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00cbc000"
              },
              {
                "name": "RegionSize",
                "value": "0x00049000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2258
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "2616",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004ec"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00c94d38"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "1416"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 2259
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "2616",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000004ec",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00c94d38"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "1416"
              }
            ],
            "repeated": 0,
            "id": 2260
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "2616",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004ec"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "1416"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 2261
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2262
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 2263
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2264
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2265
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 2266
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08121000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2267
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2268
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2269
          },
          {
            "timestamp": "2026-04-25 06:56:37,063",
            "thread_id": "1416",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004ec"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\x90s\\x00T\\x19\\x00\\x00\\x88\\x05\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "1416"
              }
            ],
            "repeated": 0,
            "id": 2270
          },
          {
            "timestamp": "2026-04-25 06:56:37,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2271
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b754",
            "category": "system",
            "api": "LdrLoadDll",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\ntdll.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2272
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b754",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\ntdll.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 2273
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b754",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ntdll.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x77e40000"
              }
            ],
            "repeated": 0,
            "id": 2274
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b754",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x77e40000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "ntdll.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2275
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b754",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtQuerySystemInformation"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77eb2df0"
              }
            ],
            "repeated": 0,
            "id": 2276
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b754",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ntdll.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77e40000"
              },
              {
                "name": "FunctionName",
                "value": "NtQuerySystemInformationW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2277
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": false,
            "return": "0xffffffffc0000004",
            "pretty_return": "INFO_LENGTH_MISMATCH",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 2278
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x065b0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00032000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2279
          },
          {
            "timestamp": "2026-04-25 06:56:37,110",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 2280
          },
          {
            "timestamp": "2026-04-25 06:56:37,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2281
          },
          {
            "timestamp": "2026-04-25 06:56:37,251",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b764",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetKeyboardLayout"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d4f170"
              }
            ],
            "repeated": 0,
            "id": 2282
          },
          {
            "timestamp": "2026-04-25 06:56:37,251",
            "thread_id": "6948",
            "caller": "0x0288a3a6",
            "parentcaller": "0x0507b764",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 2283
          },
          {
            "timestamp": "2026-04-25 06:56:37,251",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b7d2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowText"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2284
          },
          {
            "timestamp": "2026-04-25 06:56:37,251",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507b7d2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "GetWindowTextW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d49d50"
              }
            ],
            "repeated": 0,
            "id": 2285
          },
          {
            "timestamp": "2026-04-25 06:56:37,251",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 2286
          },
          {
            "timestamp": "2026-04-25 06:56:37,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2287
          },
          {
            "timestamp": "2026-04-25 06:56:37,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2288
          },
          {
            "timestamp": "2026-04-25 06:56:37,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2289
          },
          {
            "timestamp": "2026-04-25 06:56:37,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2290
          },
          {
            "timestamp": "2026-04-25 06:56:37,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2291
          },
          {
            "timestamp": "2026-04-25 06:56:37,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2292
          },
          {
            "timestamp": "2026-04-25 06:56:37,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2293
          },
          {
            "timestamp": "2026-04-25 06:56:37,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2294
          },
          {
            "timestamp": "2026-04-25 06:56:37,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2295
          },
          {
            "timestamp": "2026-04-25 06:56:37,297",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d979",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "RegisterRawInputDevices"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d51ef0"
              }
            ],
            "repeated": 0,
            "id": 2296
          },
          {
            "timestamp": "2026-04-25 06:56:37,313",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d9c4",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SetClipboardViewer"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d3bd90"
              }
            ],
            "repeated": 0,
            "id": 2297
          },
          {
            "timestamp": "2026-04-25 06:56:37,313",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d8b6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2298
          },
          {
            "timestamp": "2026-04-25 06:56:37,313",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d8b6",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "SendMessageA"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d33eb0"
              }
            ],
            "repeated": 0,
            "id": 2299
          },
          {
            "timestamp": "2026-04-25 06:56:37,313",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x050788f9",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 2300
          },
          {
            "timestamp": "2026-04-25 06:56:37,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2301
          },
          {
            "timestamp": "2026-04-25 06:56:37,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2302
          },
          {
            "timestamp": "2026-04-25 06:56:37,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2303
          },
          {
            "timestamp": "2026-04-25 06:56:37,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2304
          },
          {
            "timestamp": "2026-04-25 06:56:37,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2305
          },
          {
            "timestamp": "2026-04-25 06:56:37,360",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x0507da9f",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 2306
          },
          {
            "timestamp": "2026-04-25 06:56:37,360",
            "thread_id": "6504",
            "caller": "0x05072a9e",
            "parentcaller": "0x0507dbe5",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x055d2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2307
          },
          {
            "timestamp": "2026-04-25 06:56:37,360",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x0507db6f",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 6,
            "id": 2308
          },
          {
            "timestamp": "2026-04-25 06:56:37,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2309
          },
          {
            "timestamp": "2026-04-25 06:56:37,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2310
          },
          {
            "timestamp": "2026-04-25 06:56:37,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2311
          },
          {
            "timestamp": "2026-04-25 06:56:37,407",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x05070860",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0507e000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2312
          },
          {
            "timestamp": "2026-04-25 06:56:37,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2313
          },
          {
            "timestamp": "2026-04-25 06:56:37,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2314
          },
          {
            "timestamp": "2026-04-25 06:56:37,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2315
          },
          {
            "timestamp": "2026-04-25 06:56:37,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2316
          },
          {
            "timestamp": "2026-04-25 06:56:37,485",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2317
          },
          {
            "timestamp": "2026-04-25 06:56:37,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2318
          },
          {
            "timestamp": "2026-04-25 06:56:37,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2319
          },
          {
            "timestamp": "2026-04-25 06:56:37,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2320
          },
          {
            "timestamp": "2026-04-25 06:56:37,547",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2321
          },
          {
            "timestamp": "2026-04-25 06:56:37,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2322
          },
          {
            "timestamp": "2026-04-25 06:56:37,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2323
          },
          {
            "timestamp": "2026-04-25 06:56:37,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2324
          },
          {
            "timestamp": "2026-04-25 06:56:37,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2325
          },
          {
            "timestamp": "2026-04-25 06:56:37,579",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2326
          },
          {
            "timestamp": "2026-04-25 06:56:37,579",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2327
          },
          {
            "timestamp": "2026-04-25 06:56:37,610",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2328
          },
          {
            "timestamp": "2026-04-25 06:56:37,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2329
          },
          {
            "timestamp": "2026-04-25 06:56:37,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2330
          },
          {
            "timestamp": "2026-04-25 06:56:37,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2331
          },
          {
            "timestamp": "2026-04-25 06:56:37,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2332
          },
          {
            "timestamp": "2026-04-25 06:56:37,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2333
          },
          {
            "timestamp": "2026-04-25 06:56:37,641",
            "thread_id": "6504",
            "caller": "0x0507e291",
            "parentcaller": "0x0507e10f",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "CoCreateGuid"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77bf6f40"
              }
            ],
            "repeated": 0,
            "id": 2334
          },
          {
            "timestamp": "2026-04-25 06:56:37,641",
            "thread_id": "6504",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 2335
          },
          {
            "timestamp": "2026-04-25 06:56:37,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2336
          },
          {
            "timestamp": "2026-04-25 06:56:37,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2337
          },
          {
            "timestamp": "2026-04-25 06:56:37,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2338
          },
          {
            "timestamp": "2026-04-25 06:56:37,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2339
          },
          {
            "timestamp": "2026-04-25 06:56:37,735",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2340
          },
          {
            "timestamp": "2026-04-25 06:56:37,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2341
          },
          {
            "timestamp": "2026-04-25 06:56:37,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2342
          },
          {
            "timestamp": "2026-04-25 06:56:37,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2343
          },
          {
            "timestamp": "2026-04-25 06:56:37,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2344
          },
          {
            "timestamp": "2026-04-25 06:56:37,751",
            "thread_id": "6504",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x065e2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2345
          },
          {
            "timestamp": "2026-04-25 06:56:37,766",
            "thread_id": "6504",
            "caller": "0x0288aab3",
            "parentcaller": "0x02882420",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows NT\\CurrentVersion"
              },
              {
                "name": "Handle",
                "value": "0x00000500"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion"
              }
            ],
            "repeated": 0,
            "id": 2346
          },
          {
            "timestamp": "2026-04-25 06:56:37,766",
            "thread_id": "6504",
            "caller": "0x0288abb6",
            "parentcaller": "0x02882420",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000500"
              },
              {
                "name": "ValueName",
                "value": "InstallationType"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows NT\\CurrentVersion\\InstallationType"
              }
            ],
            "repeated": 0,
            "id": 2347
          },
          {
            "timestamp": "2026-04-25 06:56:37,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2348
          },
          {
            "timestamp": "2026-04-25 06:56:37,766",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "RegQueryValueExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebe8e0"
              }
            ],
            "repeated": 0,
            "id": 2349
          },
          {
            "timestamp": "2026-04-25 06:56:37,766",
            "thread_id": "6504",
            "caller": "0x078816c8",
            "parentcaller": "0x02882420",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000500"
              },
              {
                "name": "ValueName",
                "value": "InstallationType"
              },
              {
                "name": "Data",
                "value": "Client"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows NT\\CurrentVersion\\InstallationType"
              }
            ],
            "repeated": 0,
            "id": 2350
          },
          {
            "timestamp": "2026-04-25 06:56:37,766",
            "thread_id": "6504",
            "caller": "0x02882420",
            "parentcaller": "0x0507ebca",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000500"
              }
            ],
            "repeated": 0,
            "id": 2351
          },
          {
            "timestamp": "2026-04-25 06:56:37,782",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07cdc000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2352
          },
          {
            "timestamp": "2026-04-25 06:56:37,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2353
          },
          {
            "timestamp": "2026-04-25 06:56:37,782",
            "thread_id": "6504",
            "caller": "0x050701a2",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "USER32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x75d10000"
              },
              {
                "name": "FunctionName",
                "value": "WaitMessage"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x75d52540"
              }
            ],
            "repeated": 0,
            "id": 2354
          },
          {
            "timestamp": "2026-04-25 06:56:37,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2355
          },
          {
            "timestamp": "2026-04-25 06:56:37,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2356
          },
          {
            "timestamp": "2026-04-25 06:56:37,797",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\159a66b8\\424bd4d8"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\159a66b8\\424bd4d8"
              }
            ],
            "repeated": 0,
            "id": 2357
          },
          {
            "timestamp": "2026-04-25 06:56:37,797",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 2358
          },
          {
            "timestamp": "2026-04-25 06:56:37,797",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000500"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "5",
                "pretty_value": "FILE_SHARE_READ|FILE_SHARE_DELETE"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2359
          },
          {
            "timestamp": "2026-04-25 06:56:37,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2360
          },
          {
            "timestamp": "2026-04-25 06:56:37,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2361
          },
          {
            "timestamp": "2026-04-25 06:56:37,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "32"
              }
            ],
            "repeated": 0,
            "id": 2362
          },
          {
            "timestamp": "2026-04-25 06:56:37,813",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000504"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0005",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ"
              },
              {
                "name": "ObjectAttributes",
                "value": ""
              },
              {
                "name": "FileHandle",
                "value": "0x00000500"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.configuration.dll"
              }
            ],
            "repeated": 0,
            "id": 2363
          },
          {
            "timestamp": "2026-04-25 06:56:37,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000504"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08220000"
              },
              {
                "name": "SectionOffset",
                "value": "0x07f5eed8"
              },
              {
                "name": "ViewSize",
                "value": "0x0006c000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2364
          },
          {
            "timestamp": "2026-04-25 06:56:37,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x40000003",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000504"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08290000"
              },
              {
                "name": "SectionOffset",
                "value": "0x07f5eed8"
              },
              {
                "name": "ViewSize",
                "value": "0x0006c000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2365
          },
          {
            "timestamp": "2026-04-25 06:56:37,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtUnmapViewOfSectionEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08220000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Flags",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 2366
          },
          {
            "timestamp": "2026-04-25 06:56:37,891",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2367
          },
          {
            "timestamp": "2026-04-25 06:56:37,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2368
          },
          {
            "timestamp": "2026-04-25 06:56:37,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2369
          },
          {
            "timestamp": "2026-04-25 06:56:37,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2370
          },
          {
            "timestamp": "2026-04-25 06:56:37,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2371
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0789a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2372
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.INI"
              }
            ],
            "repeated": 0,
            "id": 2373
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2374
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f80000"
              },
              {
                "name": "RegionSize",
                "value": "0x00005000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2375
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f85000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2376
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f86000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2377
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000508"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2378
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": false,
            "return": "0xffffffff80000005",
            "pretty_return": "BUFFER_OVERFLOW",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000500"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.configuration.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "18",
                "pretty_value": "FileAllInformation"
              },
              {
                "name": "FileInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 2379
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": false,
            "return": "0xffffffff80000005",
            "pretty_return": "BUFFER_OVERFLOW",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000508"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.configuration.dll"
              },
              {
                "name": "FileInformationClass",
                "value": "18",
                "pretty_value": "FileAllInformation"
              },
              {
                "name": "FileInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 2380
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000002"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x08220000"
              }
            ],
            "repeated": 0,
            "id": 2381
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x08220000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000009"
              }
            ],
            "repeated": 0,
            "id": 2382
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000508"
              }
            ],
            "repeated": 0,
            "id": 2383
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "filesystem",
            "api": "GetFileVersionInfoSizeW",
            "status": true,
            "return": "0x000007ec",
            "arguments": [
              {
                "name": "PathName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll"
              }
            ],
            "repeated": 0,
            "id": 2384
          },
          {
            "timestamp": "2026-04-25 06:56:37,938",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "filesystem",
            "api": "GetFileVersionInfoW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "PathName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll"
              }
            ],
            "repeated": 0,
            "id": 2385
          },
          {
            "timestamp": "2026-04-25 06:56:37,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2386
          },
          {
            "timestamp": "2026-04-25 06:56:37,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2387
          },
          {
            "timestamp": "2026-04-25 06:56:37,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2388
          },
          {
            "timestamp": "2026-04-25 06:56:37,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0789b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2389
          },
          {
            "timestamp": "2026-04-25 06:56:38,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2390
          },
          {
            "timestamp": "2026-04-25 06:56:38,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2391
          },
          {
            "timestamp": "2026-04-25 06:56:38,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2392
          },
          {
            "timestamp": "2026-04-25 06:56:38,032",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507efa2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0507f000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2393
          },
          {
            "timestamp": "2026-04-25 06:56:38,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f024",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0789c000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2394
          },
          {
            "timestamp": "2026-04-25 06:56:38,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f2ed",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0289f000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2395
          },
          {
            "timestamp": "2026-04-25 06:56:38,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f235",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0789d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2396
          },
          {
            "timestamp": "2026-04-25 06:56:38,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f235",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f87000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2397
          },
          {
            "timestamp": "2026-04-25 06:56:38,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2398
          },
          {
            "timestamp": "2026-04-25 06:56:38,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2399
          },
          {
            "timestamp": "2026-04-25 06:56:38,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f4c2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2400
          },
          {
            "timestamp": "2026-04-25 06:56:38,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f4c2",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2401
          },
          {
            "timestamp": "2026-04-25 06:56:38,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2402
          },
          {
            "timestamp": "2026-04-25 06:56:38,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2403
          },
          {
            "timestamp": "2026-04-25 06:56:38,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2404
          },
          {
            "timestamp": "2026-04-25 06:56:38,079",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0789e000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2405
          },
          {
            "timestamp": "2026-04-25 06:56:38,126",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0789f000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2406
          },
          {
            "timestamp": "2026-04-25 06:56:38,126",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2407
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2408
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2409
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2410
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2411
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2412
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2413
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2414
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2415
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2416
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08360000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2417
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2418
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2419
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2420
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2421
          },
          {
            "timestamp": "2026-04-25 06:56:38,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2422
          },
          {
            "timestamp": "2026-04-25 06:56:38,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08360000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2423
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08361000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2424
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f88000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2425
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2426
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2427
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2428
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2429
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2430
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f575",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2431
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f244",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2432
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507f244",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2433
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2434
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2435
          },
          {
            "timestamp": "2026-04-25 06:56:38,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361977",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2436
          },
          {
            "timestamp": "2026-04-25 06:56:38,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2437
          },
          {
            "timestamp": "2026-04-25 06:56:38,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2438
          },
          {
            "timestamp": "2026-04-25 06:56:38,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2439
          },
          {
            "timestamp": "2026-04-25 06:56:38,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361977",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08300000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2440
          },
          {
            "timestamp": "2026-04-25 06:56:38,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361977",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2441
          },
          {
            "timestamp": "2026-04-25 06:56:38,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361977",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2442
          },
          {
            "timestamp": "2026-04-25 06:56:38,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361e0e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f89000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2443
          },
          {
            "timestamp": "2026-04-25 06:56:38,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361ebc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08362000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2444
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2445
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2446
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361f84",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2447
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361f84",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2448
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\6faf58\\19ab8d57"
              },
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57"
              }
            ],
            "repeated": 0,
            "id": 2449
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "Index",
                "value": "0"
              },
              {
                "name": "Name",
                "value": "7"
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7"
              }
            ],
            "repeated": 0,
            "id": 2450
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegEnumKeyExW",
            "status": false,
            "return": "0x00000103",
            "pretty_return": "NO_MORE_ITEMS",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "Index",
                "value": "1"
              },
              {
                "name": "Name",
                "value": ""
              },
              {
                "name": "Class",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\"
              }
            ],
            "repeated": 0,
            "id": 2451
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 2452
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\6faf58\\19ab8d57\\7"
              },
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7"
              }
            ],
            "repeated": 0,
            "id": 2453
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Xml,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 2454
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "ConfigMask"
              },
              {
                "name": "Data",
                "value": "4361"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigMask"
              }
            ],
            "repeated": 0,
            "id": 2455
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "ConfigString"
              },
              {
                "name": "Data",
                "value": ""
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigString"
              }
            ],
            "repeated": 0,
            "id": 2456
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "MVID"
              },
              {
                "name": "Data",
                "value": "\\xba\\xe2N\\x9b\\xcb\\xc0\\x1b\\xb2\\xa0\\xedO\\xa7Q4pA"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MVID"
              }
            ],
            "repeated": 0,
            "id": 2457
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 2458
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "NI\\6faf58\\19ab8d57\\7"
              },
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7"
              }
            ],
            "repeated": 0,
            "id": 2459
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "EvalationData"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\EvalationData"
              }
            ],
            "repeated": 0,
            "id": 2460
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "0"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\Status"
              }
            ],
            "repeated": 0,
            "id": 2461
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "ILDependencies"
              },
              {
                "name": "Data",
                "value": "\\xd8\\xd4KB\\xd5\\x04\\xc5\\x0c\\x06\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xee\\x8fcu';Y\\x11\\x05\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00W\\x8d\\xab\\x19t&\\xa3.\\x07\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ILDependencies"
              }
            ],
            "repeated": 0,
            "id": 2462
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "NIDependencies"
              },
              {
                "name": "Data",
                "value": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O|\\xbc0O\\xfeP?\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\NIDependencies"
              }
            ],
            "repeated": 0,
            "id": 2463
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "MissingDependencies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MissingDependencies"
              }
            ],
            "repeated": 0,
            "id": 2464
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 2465
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000368"
              },
              {
                "name": "SubKey",
                "value": "IL\\75638fee\\11593b27\\5"
              },
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5"
              }
            ],
            "repeated": 0,
            "id": 2466
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "DisplayName"
              },
              {
                "name": "Data",
                "value": "System.Data.SqlXml,2.0.0.0,,b77a5c561934e089"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\DisplayName"
              }
            ],
            "repeated": 0,
            "id": 2467
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "Status"
              },
              {
                "name": "Data",
                "value": "4098"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Status"
              }
            ],
            "repeated": 0,
            "id": 2468
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "Modules"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Modules"
              }
            ],
            "repeated": 0,
            "id": 2469
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "SIG"
              },
              {
                "name": "Data",
                "value": "9S\\x1e/K\\x98DN\\xa1\\xa3^\\xba\\xd8\\xae\\xa3M\\x85\\x11\\x9b\\x17\\x815z^\\x15:\\xb8\\xb7\\x13\\x01\\xd4)\\xebl\\xb1\\x90"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\SIG"
              }
            ],
            "repeated": 0,
            "id": 2470
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "ValueName",
                "value": "LastModTime"
              },
              {
                "name": "Data",
                "value": "\\x00\\xe8\\xdd\\xc5;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\LastModTime"
              }
            ],
            "repeated": 0,
            "id": 2471
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 2472
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000394"
              },
              {
                "name": "SubKey",
                "value": "policy.2.0.System.Data.SqlXml__b77a5c561934e089"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Data.SqlXml__b77a5c561934e089"
              }
            ],
            "repeated": 0,
            "id": 2473
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000374"
              },
              {
                "name": "ValueName",
                "value": "System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL"
              },
              {
                "name": "Data",
                "value": "\\x00\\xe8\\xdd\\xc5;\\xac\\xd5\\x01"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL"
              }
            ],
            "repeated": 0,
            "id": 2474
          },
          {
            "timestamp": "2026-04-25 06:56:38,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 2475
          },
          {
            "timestamp": "2026-04-25 06:56:38,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2476
          },
          {
            "timestamp": "2026-04-25 06:56:38,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2477
          },
          {
            "timestamp": "2026-04-25 06:56:38,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2478
          },
          {
            "timestamp": "2026-04-25 06:56:38,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2479
          },
          {
            "timestamp": "2026-04-25 06:56:38,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2480
          },
          {
            "timestamp": "2026-04-25 06:56:38,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2481
          },
          {
            "timestamp": "2026-04-25 06:56:38,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2482
          },
          {
            "timestamp": "2026-04-25 06:56:38,438",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\bae24e9bcbc01bb2a0ed4fa751347041\\System.Xml.ni"
              },
              {
                "name": "DllBase",
                "value": "0x708c0000"
              }
            ],
            "repeated": 0,
            "id": 2483
          },
          {
            "timestamp": "2026-04-25 06:56:38,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2484
          },
          {
            "timestamp": "2026-04-25 06:56:38,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2485
          },
          {
            "timestamp": "2026-04-25 06:56:38,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2486
          },
          {
            "timestamp": "2026-04-25 06:56:38,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2487
          },
          {
            "timestamp": "2026-04-25 06:56:38,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2488
          },
          {
            "timestamp": "2026-04-25 06:56:38,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2489
          },
          {
            "timestamp": "2026-04-25 06:56:38,688",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2490
          },
          {
            "timestamp": "2026-04-25 06:56:38,688",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2491
          },
          {
            "timestamp": "2026-04-25 06:56:38,719",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\bae24e9bcbc01bb2a0ed4fa751347041\\System.Xml.ni.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x708c0000"
              }
            ],
            "repeated": 0,
            "id": 2492
          },
          {
            "timestamp": "2026-04-25 06:56:38,719",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x708c0000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\bae24e9bcbc01bb2a0ed4fa751347041\\System.Xml.ni.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 2493
          },
          {
            "timestamp": "2026-04-25 06:56:38,735",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "misc",
            "api": "GetSystemInfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 2494
          },
          {
            "timestamp": "2026-04-25 06:56:38,735",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "MSCORWKS.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73780000"
              }
            ],
            "repeated": 0,
            "id": 2495
          },
          {
            "timestamp": "2026-04-25 06:56:38,735",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "mscorjit.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x71660000"
              }
            ],
            "repeated": 0,
            "id": 2496
          },
          {
            "timestamp": "2026-04-25 06:56:38,735",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "filesystem",
            "api": "FindFirstFileExW",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.INI"
              }
            ],
            "repeated": 0,
            "id": 2497
          },
          {
            "timestamp": "2026-04-25 06:56:38,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2498
          },
          {
            "timestamp": "2026-04-25 06:56:38,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2499
          },
          {
            "timestamp": "2026-04-25 06:56:38,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2500
          },
          {
            "timestamp": "2026-04-25 06:56:38,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2501
          },
          {
            "timestamp": "2026-04-25 06:56:38,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2502
          },
          {
            "timestamp": "2026-04-25 06:56:38,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2503
          },
          {
            "timestamp": "2026-04-25 06:56:38,891",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2504
          },
          {
            "timestamp": "2026-04-25 06:56:38,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2505
          },
          {
            "timestamp": "2026-04-25 06:56:38,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2506
          },
          {
            "timestamp": "2026-04-25 06:56:38,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2507
          },
          {
            "timestamp": "2026-04-25 06:56:38,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2508
          },
          {
            "timestamp": "2026-04-25 06:56:38,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2509
          },
          {
            "timestamp": "2026-04-25 06:56:38,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2510
          },
          {
            "timestamp": "2026-04-25 06:56:39,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2511
          },
          {
            "timestamp": "2026-04-25 06:56:39,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2512
          },
          {
            "timestamp": "2026-04-25 06:56:39,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2513
          },
          {
            "timestamp": "2026-04-25 06:56:39,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2514
          },
          {
            "timestamp": "2026-04-25 06:56:39,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2515
          },
          {
            "timestamp": "2026-04-25 06:56:39,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2516
          },
          {
            "timestamp": "2026-04-25 06:56:39,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2517
          },
          {
            "timestamp": "2026-04-25 06:56:39,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2518
          },
          {
            "timestamp": "2026-04-25 06:56:39,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2519
          },
          {
            "timestamp": "2026-04-25 06:56:39,188",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2520
          },
          {
            "timestamp": "2026-04-25 06:56:39,204",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2521
          },
          {
            "timestamp": "2026-04-25 06:56:39,204",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2522
          },
          {
            "timestamp": "2026-04-25 06:56:39,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2523
          },
          {
            "timestamp": "2026-04-25 06:56:39,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2524
          },
          {
            "timestamp": "2026-04-25 06:56:39,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2525
          },
          {
            "timestamp": "2026-04-25 06:56:39,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2526
          },
          {
            "timestamp": "2026-04-25 06:56:39,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2527
          },
          {
            "timestamp": "2026-04-25 06:56:39,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2528
          },
          {
            "timestamp": "2026-04-25 06:56:39,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2529
          },
          {
            "timestamp": "2026-04-25 06:56:39,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2530
          },
          {
            "timestamp": "2026-04-25 06:56:39,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2531
          },
          {
            "timestamp": "2026-04-25 06:56:39,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2532
          },
          {
            "timestamp": "2026-04-25 06:56:39,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2533
          },
          {
            "timestamp": "2026-04-25 06:56:39,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2534
          },
          {
            "timestamp": "2026-04-25 06:56:39,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2535
          },
          {
            "timestamp": "2026-04-25 06:56:39,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2536
          },
          {
            "timestamp": "2026-04-25 06:56:39,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2537
          },
          {
            "timestamp": "2026-04-25 06:56:39,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2538
          },
          {
            "timestamp": "2026-04-25 06:56:39,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2539
          },
          {
            "timestamp": "2026-04-25 06:56:39,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2540
          },
          {
            "timestamp": "2026-04-25 06:56:39,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2541
          },
          {
            "timestamp": "2026-04-25 06:56:39,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2542
          },
          {
            "timestamp": "2026-04-25 06:56:39,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2543
          },
          {
            "timestamp": "2026-04-25 06:56:39,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2544
          },
          {
            "timestamp": "2026-04-25 06:56:39,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2545
          },
          {
            "timestamp": "2026-04-25 06:56:39,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2546
          },
          {
            "timestamp": "2026-04-25 06:56:39,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2547
          },
          {
            "timestamp": "2026-04-25 06:56:39,719",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2548
          },
          {
            "timestamp": "2026-04-25 06:56:39,719",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2549
          },
          {
            "timestamp": "2026-04-25 06:56:39,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2550
          },
          {
            "timestamp": "2026-04-25 06:56:39,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2551
          },
          {
            "timestamp": "2026-04-25 06:56:39,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2552
          },
          {
            "timestamp": "2026-04-25 06:56:39,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2553
          },
          {
            "timestamp": "2026-04-25 06:56:39,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2554
          },
          {
            "timestamp": "2026-04-25 06:56:39,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2555
          },
          {
            "timestamp": "2026-04-25 06:56:39,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2556
          },
          {
            "timestamp": "2026-04-25 06:56:39,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 2557
          },
          {
            "timestamp": "2026-04-25 06:56:39,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2558
          },
          {
            "timestamp": "2026-04-25 06:56:39,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2559
          },
          {
            "timestamp": "2026-04-25 06:56:39,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2560
          },
          {
            "timestamp": "2026-04-25 06:56:39,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2561
          },
          {
            "timestamp": "2026-04-25 06:56:39,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2562
          },
          {
            "timestamp": "2026-04-25 06:56:39,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2563
          },
          {
            "timestamp": "2026-04-25 06:56:39,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2564
          },
          {
            "timestamp": "2026-04-25 06:56:39,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2565
          },
          {
            "timestamp": "2026-04-25 06:56:40,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2566
          },
          {
            "timestamp": "2026-04-25 06:56:40,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2567
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2568
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2569
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2570
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08363000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2571
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f8a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2572
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2573
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2574
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2575
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08361015",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2576
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x083636cd",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentProcess"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2e80"
              }
            ],
            "repeated": 0,
            "id": 2577
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x083636cd",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentProcessW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2578
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x083636cd",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessToken"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ebea30"
              }
            ],
            "repeated": 0,
            "id": 2579
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x083636cd",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessTokenW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2580
          },
          {
            "timestamp": "2026-04-25 06:56:40,047",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x0000051c"
              }
            ],
            "repeated": 0,
            "id": 2581
          },
          {
            "timestamp": "2026-04-25 06:56:40,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2582
          },
          {
            "timestamp": "2026-04-25 06:56:40,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2583
          },
          {
            "timestamp": "2026-04-25 06:56:40,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2584
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x08363734",
            "parentcaller": "0x083618b2",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\.NETFramework\\Policy\\AppPatch"
              },
              {
                "name": "Handle",
                "value": "0x00000518"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Policy\\AppPatch"
              }
            ],
            "repeated": 0,
            "id": 2585
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x08363734",
            "parentcaller": "0x083618b2",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319"
              }
            ],
            "repeated": 0,
            "id": 2586
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x08363734",
            "parentcaller": "0x083618b2",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000518"
              },
              {
                "name": "SubKey",
                "value": "v4.0.30319.00000"
              },
              {
                "name": "Handle",
                "value": "0x00000520"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000"
              }
            ],
            "repeated": 0,
            "id": 2587
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x08363734",
            "parentcaller": "0x083618b2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 2588
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x08363734",
            "parentcaller": "0x083618b2",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": false,
            "return": "0x00000002",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x00000520"
              },
              {
                "name": "SubKey",
                "value": "mscorwks.dll"
              },
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000\\mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 2589
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x08363734",
            "parentcaller": "0x083618b2",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000520"
              }
            ],
            "repeated": 0,
            "id": 2590
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362c5c",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2591
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362c5c",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 2592
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2593
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2594
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2595
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08363b68",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08301000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2596
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08363bcd",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileAttributesEx"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 2597
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08363bcd",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileAttributesExW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3330"
              }
            ],
            "repeated": 0,
            "id": 2598
          },
          {
            "timestamp": "2026-04-25 06:56:40,157",
            "thread_id": "6948",
            "caller": "0x07880994",
            "parentcaller": "0x08363bcd",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              }
            ],
            "repeated": 0,
            "id": 2599
          },
          {
            "timestamp": "2026-04-25 06:56:40,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2600
          },
          {
            "timestamp": "2026-04-25 06:56:40,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2601
          },
          {
            "timestamp": "2026-04-25 06:56:40,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2602
          },
          {
            "timestamp": "2026-04-25 06:56:40,235",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2603
          },
          {
            "timestamp": "2026-04-25 06:56:40,235",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2604
          },
          {
            "timestamp": "2026-04-25 06:56:40,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2605
          },
          {
            "timestamp": "2026-04-25 06:56:40,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2606
          },
          {
            "timestamp": "2026-04-25 06:56:40,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2607
          },
          {
            "timestamp": "2026-04-25 06:56:40,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2608
          },
          {
            "timestamp": "2026-04-25 06:56:40,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2609
          },
          {
            "timestamp": "2026-04-25 06:56:40,376",
            "thread_id": "6948",
            "caller": "0x07880994",
            "parentcaller": "0x08363eed",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              }
            ],
            "repeated": 0,
            "id": 2610
          },
          {
            "timestamp": "2026-04-25 06:56:40,376",
            "thread_id": "6948",
            "caller": "0x078800d3",
            "parentcaller": "0x08363e92",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000520"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000000"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2611
          },
          {
            "timestamp": "2026-04-25 06:56:40,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2612
          },
          {
            "timestamp": "2026-04-25 06:56:40,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2613
          },
          {
            "timestamp": "2026-04-25 06:56:40,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2614
          },
          {
            "timestamp": "2026-04-25 06:56:40,454",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362d52",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08364000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2615
          },
          {
            "timestamp": "2026-04-25 06:56:40,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2616
          },
          {
            "timestamp": "2026-04-25 06:56:40,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2617
          },
          {
            "timestamp": "2026-04-25 06:56:40,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2618
          },
          {
            "timestamp": "2026-04-25 06:56:40,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2619
          },
          {
            "timestamp": "2026-04-25 06:56:40,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2620
          },
          {
            "timestamp": "2026-04-25 06:56:40,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2621
          },
          {
            "timestamp": "2026-04-25 06:56:40,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2622
          },
          {
            "timestamp": "2026-04-25 06:56:40,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2623
          },
          {
            "timestamp": "2026-04-25 06:56:40,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2624
          },
          {
            "timestamp": "2026-04-25 06:56:40,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2625
          },
          {
            "timestamp": "2026-04-25 06:56:40,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2626
          },
          {
            "timestamp": "2026-04-25 06:56:40,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2627
          },
          {
            "timestamp": "2026-04-25 06:56:40,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2628
          },
          {
            "timestamp": "2026-04-25 06:56:40,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2629
          },
          {
            "timestamp": "2026-04-25 06:56:40,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2630
          },
          {
            "timestamp": "2026-04-25 06:56:40,751",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2631
          },
          {
            "timestamp": "2026-04-25 06:56:40,751",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2632
          },
          {
            "timestamp": "2026-04-25 06:56:40,766",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000008"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 2633
          },
          {
            "timestamp": "2026-04-25 06:56:40,766",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": false,
            "return": "0xffffffffc0000023",
            "pretty_return": "BUFFER_TOO_SMALL",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "1"
              },
              {
                "name": "TokenInformation",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 2634
          },
          {
            "timestamp": "2026-04-25 06:56:40,766",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "process",
            "api": "NtQueryInformationToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "TokenInformationClass",
                "value": "1"
              },
              {
                "name": "TokenInformation",
                "value": "\\xe0\"\\xcb\\x00\\x00\\x00\\x00\\x00\\x01\\x05\\x00\\x00\\x00\\x00\\x00\\x05\\x15\\x00\\x00\\x00\\xcc\\x04\\x82\\xdf\\xb2e\\xf3\\xf4\\xc8\\x97L\\xbe\\xe8\\x03\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 2635
          },
          {
            "timestamp": "2026-04-25 06:56:40,766",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-3749840076-4109591986-3192690632-1000"
              },
              {
                "name": "Handle",
                "value": "0x00000524"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-3749840076-4109591986-3192690632-1000"
              }
            ],
            "repeated": 0,
            "id": 2636
          },
          {
            "timestamp": "2026-04-25 06:56:40,766",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000524"
              }
            ],
            "repeated": 0,
            "id": 2637
          },
          {
            "timestamp": "2026-04-25 06:56:40,766",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 2638
          },
          {
            "timestamp": "2026-04-25 06:56:40,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2639
          },
          {
            "timestamp": "2026-04-25 06:56:40,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2640
          },
          {
            "timestamp": "2026-04-25 06:56:40,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2641
          },
          {
            "timestamp": "2026-04-25 06:56:40,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2642
          },
          {
            "timestamp": "2026-04-25 06:56:40,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2643
          },
          {
            "timestamp": "2026-04-25 06:56:40,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2644
          },
          {
            "timestamp": "2026-04-25 06:56:40,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2645
          },
          {
            "timestamp": "2026-04-25 06:56:40,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2646
          },
          {
            "timestamp": "2026-04-25 06:56:40,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2647
          },
          {
            "timestamp": "2026-04-25 06:56:40,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2648
          },
          {
            "timestamp": "2026-04-25 06:56:40,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2649
          },
          {
            "timestamp": "2026-04-25 06:56:41,032",
            "thread_id": "1416",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x055e2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2650
          },
          {
            "timestamp": "2026-04-25 06:56:41,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2651
          },
          {
            "timestamp": "2026-04-25 06:56:41,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2652
          },
          {
            "timestamp": "2026-04-25 06:56:41,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2653
          },
          {
            "timestamp": "2026-04-25 06:56:41,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2654
          },
          {
            "timestamp": "2026-04-25 06:56:41,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2655
          },
          {
            "timestamp": "2026-04-25 06:56:41,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2656
          },
          {
            "timestamp": "2026-04-25 06:56:41,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2657
          },
          {
            "timestamp": "2026-04-25 06:56:41,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2658
          },
          {
            "timestamp": "2026-04-25 06:56:41,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2659
          },
          {
            "timestamp": "2026-04-25 06:56:41,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2660
          },
          {
            "timestamp": "2026-04-25 06:56:41,266",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2661
          },
          {
            "timestamp": "2026-04-25 06:56:41,266",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2662
          },
          {
            "timestamp": "2026-04-25 06:56:41,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2663
          },
          {
            "timestamp": "2026-04-25 06:56:41,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2664
          },
          {
            "timestamp": "2026-04-25 06:56:41,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2665
          },
          {
            "timestamp": "2026-04-25 06:56:41,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2666
          },
          {
            "timestamp": "2026-04-25 06:56:41,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2667
          },
          {
            "timestamp": "2026-04-25 06:56:41,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2668
          },
          {
            "timestamp": "2026-04-25 06:56:41,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2669
          },
          {
            "timestamp": "2026-04-25 06:56:41,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2670
          },
          {
            "timestamp": "2026-04-25 06:56:41,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2671
          },
          {
            "timestamp": "2026-04-25 06:56:41,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2672
          },
          {
            "timestamp": "2026-04-25 06:56:41,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2673
          },
          {
            "timestamp": "2026-04-25 06:56:41,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2674
          },
          {
            "timestamp": "2026-04-25 06:56:41,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2675
          },
          {
            "timestamp": "2026-04-25 06:56:41,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2676
          },
          {
            "timestamp": "2026-04-25 06:56:41,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2677
          },
          {
            "timestamp": "2026-04-25 06:56:41,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2678
          },
          {
            "timestamp": "2026-04-25 06:56:41,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2679
          },
          {
            "timestamp": "2026-04-25 06:56:41,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2680
          },
          {
            "timestamp": "2026-04-25 06:56:41,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2681
          },
          {
            "timestamp": "2026-04-25 06:56:41,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2682
          },
          {
            "timestamp": "2026-04-25 06:56:41,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2683
          },
          {
            "timestamp": "2026-04-25 06:56:41,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2684
          },
          {
            "timestamp": "2026-04-25 06:56:41,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2685
          },
          {
            "timestamp": "2026-04-25 06:56:41,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2686
          },
          {
            "timestamp": "2026-04-25 06:56:41,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2687
          },
          {
            "timestamp": "2026-04-25 06:56:41,782",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2688
          },
          {
            "timestamp": "2026-04-25 06:56:41,782",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2689
          },
          {
            "timestamp": "2026-04-25 06:56:41,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2690
          },
          {
            "timestamp": "2026-04-25 06:56:41,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2691
          },
          {
            "timestamp": "2026-04-25 06:56:41,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2692
          },
          {
            "timestamp": "2026-04-25 06:56:41,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2693
          },
          {
            "timestamp": "2026-04-25 06:56:41,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2694
          },
          {
            "timestamp": "2026-04-25 06:56:41,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2695
          },
          {
            "timestamp": "2026-04-25 06:56:41,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2696
          },
          {
            "timestamp": "2026-04-25 06:56:41,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2697
          },
          {
            "timestamp": "2026-04-25 06:56:41,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2698
          },
          {
            "timestamp": "2026-04-25 06:56:41,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2699
          },
          {
            "timestamp": "2026-04-25 06:56:41,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2700
          },
          {
            "timestamp": "2026-04-25 06:56:42,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2701
          },
          {
            "timestamp": "2026-04-25 06:56:42,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2702
          },
          {
            "timestamp": "2026-04-25 06:56:42,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2703
          },
          {
            "timestamp": "2026-04-25 06:56:42,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2704
          },
          {
            "timestamp": "2026-04-25 06:56:42,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2705
          },
          {
            "timestamp": "2026-04-25 06:56:42,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2706
          },
          {
            "timestamp": "2026-04-25 06:56:42,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2707
          },
          {
            "timestamp": "2026-04-25 06:56:42,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2708
          },
          {
            "timestamp": "2026-04-25 06:56:42,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2709
          },
          {
            "timestamp": "2026-04-25 06:56:42,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2710
          },
          {
            "timestamp": "2026-04-25 06:56:42,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2711
          },
          {
            "timestamp": "2026-04-25 06:56:42,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2712
          },
          {
            "timestamp": "2026-04-25 06:56:42,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2713
          },
          {
            "timestamp": "2026-04-25 06:56:42,297",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2714
          },
          {
            "timestamp": "2026-04-25 06:56:42,297",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2715
          },
          {
            "timestamp": "2026-04-25 06:56:42,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2716
          },
          {
            "timestamp": "2026-04-25 06:56:42,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2717
          },
          {
            "timestamp": "2026-04-25 06:56:42,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2718
          },
          {
            "timestamp": "2026-04-25 06:56:42,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2719
          },
          {
            "timestamp": "2026-04-25 06:56:42,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2720
          },
          {
            "timestamp": "2026-04-25 06:56:42,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2721
          },
          {
            "timestamp": "2026-04-25 06:56:42,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2722
          },
          {
            "timestamp": "2026-04-25 06:56:42,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2723
          },
          {
            "timestamp": "2026-04-25 06:56:42,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2724
          },
          {
            "timestamp": "2026-04-25 06:56:42,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2725
          },
          {
            "timestamp": "2026-04-25 06:56:42,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2726
          },
          {
            "timestamp": "2026-04-25 06:56:42,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2727
          },
          {
            "timestamp": "2026-04-25 06:56:42,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2728
          },
          {
            "timestamp": "2026-04-25 06:56:42,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2729
          },
          {
            "timestamp": "2026-04-25 06:56:42,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2730
          },
          {
            "timestamp": "2026-04-25 06:56:42,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2731
          },
          {
            "timestamp": "2026-04-25 06:56:42,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2732
          },
          {
            "timestamp": "2026-04-25 06:56:42,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2733
          },
          {
            "timestamp": "2026-04-25 06:56:42,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2734
          },
          {
            "timestamp": "2026-04-25 06:56:42,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2735
          },
          {
            "timestamp": "2026-04-25 06:56:42,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2736
          },
          {
            "timestamp": "2026-04-25 06:56:42,813",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2737
          },
          {
            "timestamp": "2026-04-25 06:56:42,813",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2738
          },
          {
            "timestamp": "2026-04-25 06:56:42,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2739
          },
          {
            "timestamp": "2026-04-25 06:56:42,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2740
          },
          {
            "timestamp": "2026-04-25 06:56:42,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2741
          },
          {
            "timestamp": "2026-04-25 06:56:42,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2742
          },
          {
            "timestamp": "2026-04-25 06:56:42,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2743
          },
          {
            "timestamp": "2026-04-25 06:56:42,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2744
          },
          {
            "timestamp": "2026-04-25 06:56:42,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2745
          },
          {
            "timestamp": "2026-04-25 06:56:42,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2746
          },
          {
            "timestamp": "2026-04-25 06:56:42,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2747
          },
          {
            "timestamp": "2026-04-25 06:56:42,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2748
          },
          {
            "timestamp": "2026-04-25 06:56:42,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2749
          },
          {
            "timestamp": "2026-04-25 06:56:43,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2750
          },
          {
            "timestamp": "2026-04-25 06:56:43,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2751
          },
          {
            "timestamp": "2026-04-25 06:56:43,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2752
          },
          {
            "timestamp": "2026-04-25 06:56:43,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2753
          },
          {
            "timestamp": "2026-04-25 06:56:43,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2754
          },
          {
            "timestamp": "2026-04-25 06:56:43,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2755
          },
          {
            "timestamp": "2026-04-25 06:56:43,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2756
          },
          {
            "timestamp": "2026-04-25 06:56:43,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2757
          },
          {
            "timestamp": "2026-04-25 06:56:43,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2758
          },
          {
            "timestamp": "2026-04-25 06:56:43,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2759
          },
          {
            "timestamp": "2026-04-25 06:56:43,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2760
          },
          {
            "timestamp": "2026-04-25 06:56:43,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2761
          },
          {
            "timestamp": "2026-04-25 06:56:43,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2762
          },
          {
            "timestamp": "2026-04-25 06:56:43,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2763
          },
          {
            "timestamp": "2026-04-25 06:56:43,329",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2764
          },
          {
            "timestamp": "2026-04-25 06:56:43,329",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2765
          },
          {
            "timestamp": "2026-04-25 06:56:43,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2766
          },
          {
            "timestamp": "2026-04-25 06:56:43,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2767
          },
          {
            "timestamp": "2026-04-25 06:56:43,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2768
          },
          {
            "timestamp": "2026-04-25 06:56:43,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2769
          },
          {
            "timestamp": "2026-04-25 06:56:43,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2770
          },
          {
            "timestamp": "2026-04-25 06:56:43,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2771
          },
          {
            "timestamp": "2026-04-25 06:56:43,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2772
          },
          {
            "timestamp": "2026-04-25 06:56:43,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2773
          },
          {
            "timestamp": "2026-04-25 06:56:43,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2774
          },
          {
            "timestamp": "2026-04-25 06:56:43,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2775
          },
          {
            "timestamp": "2026-04-25 06:56:43,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2776
          },
          {
            "timestamp": "2026-04-25 06:56:43,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2777
          },
          {
            "timestamp": "2026-04-25 06:56:43,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2778
          },
          {
            "timestamp": "2026-04-25 06:56:43,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2779
          },
          {
            "timestamp": "2026-04-25 06:56:43,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2780
          },
          {
            "timestamp": "2026-04-25 06:56:43,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2781
          },
          {
            "timestamp": "2026-04-25 06:56:43,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2782
          },
          {
            "timestamp": "2026-04-25 06:56:43,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2783
          },
          {
            "timestamp": "2026-04-25 06:56:43,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2784
          },
          {
            "timestamp": "2026-04-25 06:56:43,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2785
          },
          {
            "timestamp": "2026-04-25 06:56:43,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2786
          },
          {
            "timestamp": "2026-04-25 06:56:43,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2787
          },
          {
            "timestamp": "2026-04-25 06:56:43,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2788
          },
          {
            "timestamp": "2026-04-25 06:56:43,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2789
          },
          {
            "timestamp": "2026-04-25 06:56:43,844",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2790
          },
          {
            "timestamp": "2026-04-25 06:56:43,844",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2791
          },
          {
            "timestamp": "2026-04-25 06:56:43,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2792
          },
          {
            "timestamp": "2026-04-25 06:56:43,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2793
          },
          {
            "timestamp": "2026-04-25 06:56:43,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2794
          },
          {
            "timestamp": "2026-04-25 06:56:43,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2795
          },
          {
            "timestamp": "2026-04-25 06:56:43,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2796
          },
          {
            "timestamp": "2026-04-25 06:56:43,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2797
          },
          {
            "timestamp": "2026-04-25 06:56:43,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2798
          },
          {
            "timestamp": "2026-04-25 06:56:43,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2799
          },
          {
            "timestamp": "2026-04-25 06:56:44,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2800
          },
          {
            "timestamp": "2026-04-25 06:56:44,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2801
          },
          {
            "timestamp": "2026-04-25 06:56:44,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2802
          },
          {
            "timestamp": "2026-04-25 06:56:44,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2803
          },
          {
            "timestamp": "2026-04-25 06:56:44,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2804
          },
          {
            "timestamp": "2026-04-25 06:56:44,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2805
          },
          {
            "timestamp": "2026-04-25 06:56:44,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2806
          },
          {
            "timestamp": "2026-04-25 06:56:44,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2807
          },
          {
            "timestamp": "2026-04-25 06:56:44,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2808
          },
          {
            "timestamp": "2026-04-25 06:56:44,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2809
          },
          {
            "timestamp": "2026-04-25 06:56:44,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 2,
            "id": 2810
          },
          {
            "timestamp": "2026-04-25 06:56:44,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2811
          },
          {
            "timestamp": "2026-04-25 06:56:44,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2812
          },
          {
            "timestamp": "2026-04-25 06:56:44,360",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2813
          },
          {
            "timestamp": "2026-04-25 06:56:44,360",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2814
          },
          {
            "timestamp": "2026-04-25 06:56:44,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2815
          },
          {
            "timestamp": "2026-04-25 06:56:44,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2816
          },
          {
            "timestamp": "2026-04-25 06:56:44,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2817
          },
          {
            "timestamp": "2026-04-25 06:56:44,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2818
          },
          {
            "timestamp": "2026-04-25 06:56:44,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2819
          },
          {
            "timestamp": "2026-04-25 06:56:44,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2820
          },
          {
            "timestamp": "2026-04-25 06:56:44,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2821
          },
          {
            "timestamp": "2026-04-25 06:56:44,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2822
          },
          {
            "timestamp": "2026-04-25 06:56:44,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2823
          },
          {
            "timestamp": "2026-04-25 06:56:44,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2824
          },
          {
            "timestamp": "2026-04-25 06:56:44,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2825
          },
          {
            "timestamp": "2026-04-25 06:56:44,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2826
          },
          {
            "timestamp": "2026-04-25 06:56:44,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2827
          },
          {
            "timestamp": "2026-04-25 06:56:44,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2828
          },
          {
            "timestamp": "2026-04-25 06:56:44,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2829
          },
          {
            "timestamp": "2026-04-25 06:56:44,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2830
          },
          {
            "timestamp": "2026-04-25 06:56:44,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2831
          },
          {
            "timestamp": "2026-04-25 06:56:44,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2832
          },
          {
            "timestamp": "2026-04-25 06:56:44,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2833
          },
          {
            "timestamp": "2026-04-25 06:56:44,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2834
          },
          {
            "timestamp": "2026-04-25 06:56:44,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2835
          },
          {
            "timestamp": "2026-04-25 06:56:44,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2836
          },
          {
            "timestamp": "2026-04-25 06:56:44,876",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2837
          },
          {
            "timestamp": "2026-04-25 06:56:44,876",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2838
          },
          {
            "timestamp": "2026-04-25 06:56:44,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2839
          },
          {
            "timestamp": "2026-04-25 06:56:44,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2840
          },
          {
            "timestamp": "2026-04-25 06:56:44,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2841
          },
          {
            "timestamp": "2026-04-25 06:56:44,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2842
          },
          {
            "timestamp": "2026-04-25 06:56:44,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2843
          },
          {
            "timestamp": "2026-04-25 06:56:44,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2844
          },
          {
            "timestamp": "2026-04-25 06:56:44,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2845
          },
          {
            "timestamp": "2026-04-25 06:56:45,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2846
          },
          {
            "timestamp": "2026-04-25 06:56:45,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2847
          },
          {
            "timestamp": "2026-04-25 06:56:45,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2848
          },
          {
            "timestamp": "2026-04-25 06:56:45,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2849
          },
          {
            "timestamp": "2026-04-25 06:56:45,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2850
          },
          {
            "timestamp": "2026-04-25 06:56:45,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2851
          },
          {
            "timestamp": "2026-04-25 06:56:45,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2852
          },
          {
            "timestamp": "2026-04-25 06:56:45,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2853
          },
          {
            "timestamp": "2026-04-25 06:56:45,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2854
          },
          {
            "timestamp": "2026-04-25 06:56:45,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2855
          },
          {
            "timestamp": "2026-04-25 06:56:45,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2856
          },
          {
            "timestamp": "2026-04-25 06:56:45,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2857
          },
          {
            "timestamp": "2026-04-25 06:56:45,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2858
          },
          {
            "timestamp": "2026-04-25 06:56:45,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2859
          },
          {
            "timestamp": "2026-04-25 06:56:45,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2860
          },
          {
            "timestamp": "2026-04-25 06:56:45,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2861
          },
          {
            "timestamp": "2026-04-25 06:56:45,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2862
          },
          {
            "timestamp": "2026-04-25 06:56:45,391",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2863
          },
          {
            "timestamp": "2026-04-25 06:56:45,391",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2864
          },
          {
            "timestamp": "2026-04-25 06:56:45,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2865
          },
          {
            "timestamp": "2026-04-25 06:56:45,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2866
          },
          {
            "timestamp": "2026-04-25 06:56:45,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2867
          },
          {
            "timestamp": "2026-04-25 06:56:45,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2868
          },
          {
            "timestamp": "2026-04-25 06:56:45,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2869
          },
          {
            "timestamp": "2026-04-25 06:56:45,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2870
          },
          {
            "timestamp": "2026-04-25 06:56:45,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2871
          },
          {
            "timestamp": "2026-04-25 06:56:45,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2872
          },
          {
            "timestamp": "2026-04-25 06:56:45,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2873
          },
          {
            "timestamp": "2026-04-25 06:56:45,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2874
          },
          {
            "timestamp": "2026-04-25 06:56:45,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2875
          },
          {
            "timestamp": "2026-04-25 06:56:45,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2876
          },
          {
            "timestamp": "2026-04-25 06:56:45,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2877
          },
          {
            "timestamp": "2026-04-25 06:56:45,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2878
          },
          {
            "timestamp": "2026-04-25 06:56:45,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2879
          },
          {
            "timestamp": "2026-04-25 06:56:45,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2880
          },
          {
            "timestamp": "2026-04-25 06:56:45,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2881
          },
          {
            "timestamp": "2026-04-25 06:56:45,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2882
          },
          {
            "timestamp": "2026-04-25 06:56:45,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2883
          },
          {
            "timestamp": "2026-04-25 06:56:45,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2884
          },
          {
            "timestamp": "2026-04-25 06:56:45,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2885
          },
          {
            "timestamp": "2026-04-25 06:56:45,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2886
          },
          {
            "timestamp": "2026-04-25 06:56:45,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2887
          },
          {
            "timestamp": "2026-04-25 06:56:45,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2888
          },
          {
            "timestamp": "2026-04-25 06:56:45,907",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2889
          },
          {
            "timestamp": "2026-04-25 06:56:45,907",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2890
          },
          {
            "timestamp": "2026-04-25 06:56:45,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2891
          },
          {
            "timestamp": "2026-04-25 06:56:45,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2892
          },
          {
            "timestamp": "2026-04-25 06:56:45,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2893
          },
          {
            "timestamp": "2026-04-25 06:56:46,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2894
          },
          {
            "timestamp": "2026-04-25 06:56:46,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2895
          },
          {
            "timestamp": "2026-04-25 06:56:46,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2896
          },
          {
            "timestamp": "2026-04-25 06:56:46,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2897
          },
          {
            "timestamp": "2026-04-25 06:56:46,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2898
          },
          {
            "timestamp": "2026-04-25 06:56:46,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2899
          },
          {
            "timestamp": "2026-04-25 06:56:46,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2900
          },
          {
            "timestamp": "2026-04-25 06:56:46,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2901
          },
          {
            "timestamp": "2026-04-25 06:56:46,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2902
          },
          {
            "timestamp": "2026-04-25 06:56:46,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2903
          },
          {
            "timestamp": "2026-04-25 06:56:46,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2904
          },
          {
            "timestamp": "2026-04-25 06:56:46,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2905
          },
          {
            "timestamp": "2026-04-25 06:56:46,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2906
          },
          {
            "timestamp": "2026-04-25 06:56:46,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2907
          },
          {
            "timestamp": "2026-04-25 06:56:46,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2908
          },
          {
            "timestamp": "2026-04-25 06:56:46,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2909
          },
          {
            "timestamp": "2026-04-25 06:56:46,422",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2910
          },
          {
            "timestamp": "2026-04-25 06:56:46,422",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2911
          },
          {
            "timestamp": "2026-04-25 06:56:46,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2912
          },
          {
            "timestamp": "2026-04-25 06:56:46,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2913
          },
          {
            "timestamp": "2026-04-25 06:56:46,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2914
          },
          {
            "timestamp": "2026-04-25 06:56:46,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2915
          },
          {
            "timestamp": "2026-04-25 06:56:46,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2916
          },
          {
            "timestamp": "2026-04-25 06:56:46,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2917
          },
          {
            "timestamp": "2026-04-25 06:56:46,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2918
          },
          {
            "timestamp": "2026-04-25 06:56:46,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2919
          },
          {
            "timestamp": "2026-04-25 06:56:46,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2920
          },
          {
            "timestamp": "2026-04-25 06:56:46,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2921
          },
          {
            "timestamp": "2026-04-25 06:56:46,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2922
          },
          {
            "timestamp": "2026-04-25 06:56:46,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2923
          },
          {
            "timestamp": "2026-04-25 06:56:46,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2924
          },
          {
            "timestamp": "2026-04-25 06:56:46,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2925
          },
          {
            "timestamp": "2026-04-25 06:56:46,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2926
          },
          {
            "timestamp": "2026-04-25 06:56:46,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2927
          },
          {
            "timestamp": "2026-04-25 06:56:46,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2928
          },
          {
            "timestamp": "2026-04-25 06:56:46,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2929
          },
          {
            "timestamp": "2026-04-25 06:56:46,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2930
          },
          {
            "timestamp": "2026-04-25 06:56:46,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 2931
          },
          {
            "timestamp": "2026-04-25 06:56:46,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2932
          },
          {
            "timestamp": "2026-04-25 06:56:46,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2933
          },
          {
            "timestamp": "2026-04-25 06:56:46,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2934
          },
          {
            "timestamp": "2026-04-25 06:56:46,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2935
          },
          {
            "timestamp": "2026-04-25 06:56:46,938",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2936
          },
          {
            "timestamp": "2026-04-25 06:56:46,938",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2937
          },
          {
            "timestamp": "2026-04-25 06:56:46,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2938
          },
          {
            "timestamp": "2026-04-25 06:56:46,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2939
          },
          {
            "timestamp": "2026-04-25 06:56:46,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2940
          },
          {
            "timestamp": "2026-04-25 06:56:47,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2941
          },
          {
            "timestamp": "2026-04-25 06:56:47,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2942
          },
          {
            "timestamp": "2026-04-25 06:56:47,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2943
          },
          {
            "timestamp": "2026-04-25 06:56:47,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2944
          },
          {
            "timestamp": "2026-04-25 06:56:47,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2945
          },
          {
            "timestamp": "2026-04-25 06:56:47,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2946
          },
          {
            "timestamp": "2026-04-25 06:56:47,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2947
          },
          {
            "timestamp": "2026-04-25 06:56:47,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2948
          },
          {
            "timestamp": "2026-04-25 06:56:47,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2949
          },
          {
            "timestamp": "2026-04-25 06:56:47,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2950
          },
          {
            "timestamp": "2026-04-25 06:56:47,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2951
          },
          {
            "timestamp": "2026-04-25 06:56:47,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2952
          },
          {
            "timestamp": "2026-04-25 06:56:47,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2953
          },
          {
            "timestamp": "2026-04-25 06:56:47,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2954
          },
          {
            "timestamp": "2026-04-25 06:56:47,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2955
          },
          {
            "timestamp": "2026-04-25 06:56:47,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2956
          },
          {
            "timestamp": "2026-04-25 06:56:47,407",
            "thread_id": "1416",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x055f2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 2957
          },
          {
            "timestamp": "2026-04-25 06:56:47,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2958
          },
          {
            "timestamp": "2026-04-25 06:56:47,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2959
          },
          {
            "timestamp": "2026-04-25 06:56:47,454",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 2960
          },
          {
            "timestamp": "2026-04-25 06:56:47,454",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2961
          },
          {
            "timestamp": "2026-04-25 06:56:47,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2962
          },
          {
            "timestamp": "2026-04-25 06:56:47,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2963
          },
          {
            "timestamp": "2026-04-25 06:56:47,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2964
          },
          {
            "timestamp": "2026-04-25 06:56:47,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2965
          },
          {
            "timestamp": "2026-04-25 06:56:47,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2966
          },
          {
            "timestamp": "2026-04-25 06:56:47,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2967
          },
          {
            "timestamp": "2026-04-25 06:56:47,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2968
          },
          {
            "timestamp": "2026-04-25 06:56:47,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2969
          },
          {
            "timestamp": "2026-04-25 06:56:47,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2970
          },
          {
            "timestamp": "2026-04-25 06:56:47,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2971
          },
          {
            "timestamp": "2026-04-25 06:56:47,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2972
          },
          {
            "timestamp": "2026-04-25 06:56:47,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2973
          },
          {
            "timestamp": "2026-04-25 06:56:47,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2974
          },
          {
            "timestamp": "2026-04-25 06:56:47,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2975
          },
          {
            "timestamp": "2026-04-25 06:56:47,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2976
          },
          {
            "timestamp": "2026-04-25 06:56:47,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2977
          },
          {
            "timestamp": "2026-04-25 06:56:47,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2978
          },
          {
            "timestamp": "2026-04-25 06:56:47,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2979
          },
          {
            "timestamp": "2026-04-25 06:56:47,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2980
          },
          {
            "timestamp": "2026-04-25 06:56:47,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2981
          },
          {
            "timestamp": "2026-04-25 06:56:47,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2982
          },
          {
            "timestamp": "2026-04-25 06:56:47,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2983
          },
          {
            "timestamp": "2026-04-25 06:56:47,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2984
          },
          {
            "timestamp": "2026-04-25 06:56:47,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2985
          },
          {
            "timestamp": "2026-04-25 06:56:47,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2986
          },
          {
            "timestamp": "2026-04-25 06:56:47,969",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 2987
          },
          {
            "timestamp": "2026-04-25 06:56:48,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2988
          },
          {
            "timestamp": "2026-04-25 06:56:48,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2989
          },
          {
            "timestamp": "2026-04-25 06:56:48,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2990
          },
          {
            "timestamp": "2026-04-25 06:56:48,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2991
          },
          {
            "timestamp": "2026-04-25 06:56:48,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2992
          },
          {
            "timestamp": "2026-04-25 06:56:48,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2993
          },
          {
            "timestamp": "2026-04-25 06:56:48,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2994
          },
          {
            "timestamp": "2026-04-25 06:56:48,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 2995
          },
          {
            "timestamp": "2026-04-25 06:56:48,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2996
          },
          {
            "timestamp": "2026-04-25 06:56:48,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 2997
          },
          {
            "timestamp": "2026-04-25 06:56:48,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 2998
          },
          {
            "timestamp": "2026-04-25 06:56:48,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 2999
          },
          {
            "timestamp": "2026-04-25 06:56:48,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3000
          },
          {
            "timestamp": "2026-04-25 06:56:48,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3001
          },
          {
            "timestamp": "2026-04-25 06:56:48,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3002
          },
          {
            "timestamp": "2026-04-25 06:56:48,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3003
          },
          {
            "timestamp": "2026-04-25 06:56:48,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3004
          },
          {
            "timestamp": "2026-04-25 06:56:48,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3005
          },
          {
            "timestamp": "2026-04-25 06:56:48,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3006
          },
          {
            "timestamp": "2026-04-25 06:56:48,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3007
          },
          {
            "timestamp": "2026-04-25 06:56:48,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3008
          },
          {
            "timestamp": "2026-04-25 06:56:48,485",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3009
          },
          {
            "timestamp": "2026-04-25 06:56:48,485",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3010
          },
          {
            "timestamp": "2026-04-25 06:56:48,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3011
          },
          {
            "timestamp": "2026-04-25 06:56:48,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3012
          },
          {
            "timestamp": "2026-04-25 06:56:48,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3013
          },
          {
            "timestamp": "2026-04-25 06:56:48,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3014
          },
          {
            "timestamp": "2026-04-25 06:56:48,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3015
          },
          {
            "timestamp": "2026-04-25 06:56:48,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3016
          },
          {
            "timestamp": "2026-04-25 06:56:48,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3017
          },
          {
            "timestamp": "2026-04-25 06:56:48,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3018
          },
          {
            "timestamp": "2026-04-25 06:56:48,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3019
          },
          {
            "timestamp": "2026-04-25 06:56:48,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3020
          },
          {
            "timestamp": "2026-04-25 06:56:48,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3021
          },
          {
            "timestamp": "2026-04-25 06:56:48,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3022
          },
          {
            "timestamp": "2026-04-25 06:56:48,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3023
          },
          {
            "timestamp": "2026-04-25 06:56:48,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3024
          },
          {
            "timestamp": "2026-04-25 06:56:48,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3025
          },
          {
            "timestamp": "2026-04-25 06:56:48,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3026
          },
          {
            "timestamp": "2026-04-25 06:56:48,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3027
          },
          {
            "timestamp": "2026-04-25 06:56:48,907",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3028
          },
          {
            "timestamp": "2026-04-25 06:56:48,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3029
          },
          {
            "timestamp": "2026-04-25 06:56:48,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3030
          },
          {
            "timestamp": "2026-04-25 06:56:48,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3031
          },
          {
            "timestamp": "2026-04-25 06:56:48,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3032
          },
          {
            "timestamp": "2026-04-25 06:56:48,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3033
          },
          {
            "timestamp": "2026-04-25 06:56:48,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3034
          },
          {
            "timestamp": "2026-04-25 06:56:49,001",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3035
          },
          {
            "timestamp": "2026-04-25 06:56:49,001",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3036
          },
          {
            "timestamp": "2026-04-25 06:56:49,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3037
          },
          {
            "timestamp": "2026-04-25 06:56:49,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3038
          },
          {
            "timestamp": "2026-04-25 06:56:49,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3039
          },
          {
            "timestamp": "2026-04-25 06:56:49,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3040
          },
          {
            "timestamp": "2026-04-25 06:56:49,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3041
          },
          {
            "timestamp": "2026-04-25 06:56:49,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3042
          },
          {
            "timestamp": "2026-04-25 06:56:49,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3043
          },
          {
            "timestamp": "2026-04-25 06:56:49,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3044
          },
          {
            "timestamp": "2026-04-25 06:56:49,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3045
          },
          {
            "timestamp": "2026-04-25 06:56:49,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3046
          },
          {
            "timestamp": "2026-04-25 06:56:49,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3047
          },
          {
            "timestamp": "2026-04-25 06:56:49,235",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3048
          },
          {
            "timestamp": "2026-04-25 06:56:49,235",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x02882420",
            "category": "filesystem",
            "api": "SHGetFolderPathW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Folder",
                "value": "0x0000801a",
                "pretty_value": "CSIDL_FLAG_CREATE|CSIDL_APPDATA"
              },
              {
                "name": "Path",
                "value": "C:\\Users\\cape\\AppData\\Roaming"
              }
            ],
            "repeated": 0,
            "id": 3049
          },
          {
            "timestamp": "2026-04-25 06:56:49,251",
            "thread_id": "6948",
            "caller": "0x07880994",
            "parentcaller": "0x02882420",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              }
            ],
            "repeated": 0,
            "id": 3050
          },
          {
            "timestamp": "2026-04-25 06:56:49,344",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08310000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3051
          },
          {
            "timestamp": "2026-04-25 06:56:49,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3052
          },
          {
            "timestamp": "2026-04-25 06:56:49,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3053
          },
          {
            "timestamp": "2026-04-25 06:56:49,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3054
          },
          {
            "timestamp": "2026-04-25 06:56:49,422",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "filesystem",
            "api": "NtCreateFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000514"
              },
              {
                "name": "DesiredAccess",
                "value": "0x80100080",
                "pretty_value": "GENERIC_READ|FILE_READ_ATTRIBUTES|SYNCHRONIZE"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "CreateDisposition",
                "value": "1",
                "pretty_value": "FILE_OPEN"
              },
              {
                "name": "ShareAccess",
                "value": "1",
                "pretty_value": "FILE_SHARE_READ"
              },
              {
                "name": "FileAttributes",
                "value": "0x00000080",
                "pretty_value": "FILE_ATTRIBUTE_NORMAL"
              },
              {
                "name": "ExistedBefore",
                "value": "yes"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3055
          },
          {
            "timestamp": "2026-04-25 06:56:49,422",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000514"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "<?xml version=\"1.0\" encoding=\"UTF-8\"?><!--\r\n    Please refer to machine.config.comments for a description and\r\n    the default values of each configuration section.\r\n\r\n    For a full documentation of the schema please refer to\r\n    http://go.microsoft.com/"
              },
              {
                "name": "Length",
                "value": "4095"
              }
            ],
            "repeated": 0,
            "id": 3056
          },
          {
            "timestamp": "2026-04-25 06:56:49,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3057
          },
          {
            "timestamp": "2026-04-25 06:56:49,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3058
          },
          {
            "timestamp": "2026-04-25 06:56:49,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3059
          },
          {
            "timestamp": "2026-04-25 06:56:49,454",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x04fe1000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3060
          },
          {
            "timestamp": "2026-04-25 06:56:49,469",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000514"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "7a5c561934e089\">\r\n            <section name=\"schemaImporterExtensions\" type=\"System.Xml.Serialization.Configuration.SchemaImporterExtensionsSection, System.Xml, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\"/>\r\n            <section name"
              },
              {
                "name": "Length",
                "value": "10495"
              }
            ],
            "repeated": 0,
            "id": 3061
          },
          {
            "timestamp": "2026-04-25 06:56:49,469",
            "thread_id": "6948",
            "caller": "0x078818d9",
            "parentcaller": "0x02882420",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05602000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3062
          },
          {
            "timestamp": "2026-04-25 06:56:49,469",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000514"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "\"MachineToApplication\"/>\r\n                <section name=\"outputCache\" type=\"System.Web.Configuration.OutputCacheSection, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a\" allowDefinition=\"MachineToApplication\"/>\r\n              "
              },
              {
                "name": "Length",
                "value": "11445"
              }
            ],
            "repeated": 0,
            "id": 3063
          },
          {
            "timestamp": "2026-04-25 06:56:49,469",
            "thread_id": "6948",
            "caller": "0x078818d9",
            "parentcaller": "0x02882420",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05612000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3064
          },
          {
            "timestamp": "2026-04-25 06:56:49,469",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": false,
            "return": "0xffffffffc0000011",
            "pretty_return": "END_OF_FILE",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000514"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": ""
              },
              {
                "name": "Length",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3065
          },
          {
            "timestamp": "2026-04-25 06:56:49,469",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000514"
              }
            ],
            "repeated": 0,
            "id": 3066
          },
          {
            "timestamp": "2026-04-25 06:56:49,469",
            "thread_id": "6948",
            "caller": "0x02882420",
            "parentcaller": "0x08362d52",
            "category": "crypto",
            "api": "CryptGenRandom",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Buffer",
                "value": "4\\xb0\\xc8\\x0e\\xe2dv\\xe5"
              }
            ],
            "repeated": 0,
            "id": 3067
          },
          {
            "timestamp": "2026-04-25 06:56:49,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3068
          },
          {
            "timestamp": "2026-04-25 06:56:49,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3069
          },
          {
            "timestamp": "2026-04-25 06:56:49,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3070
          },
          {
            "timestamp": "2026-04-25 06:56:49,516",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362d52",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetFileSize"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3360"
              }
            ],
            "repeated": 0,
            "id": 3071
          },
          {
            "timestamp": "2026-04-25 06:56:49,516",
            "thread_id": "6948",
            "caller": "0x07881a2a",
            "parentcaller": "0x08362d52",
            "category": "filesystem",
            "api": "NtQueryInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000520"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "FileInformationClass",
                "value": "5",
                "pretty_value": "FileStandardInformation"
              },
              {
                "name": "FileInformation",
                "value": "\\x00p\\x00\\x00\\x00\\x00\\x00\\x00\\xb3e\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 3072
          },
          {
            "timestamp": "2026-04-25 06:56:49,516",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362d52",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "ReadFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad34c0"
              }
            ],
            "repeated": 0,
            "id": 3073
          },
          {
            "timestamp": "2026-04-25 06:56:49,516",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x08362d52",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000520"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "<?xml version=\"1.0\" encoding=\"UTF-8\"?><!--\r\n    Please refer to machine.config.comments for a description and\r\n    the default values of each configuration section.\r\n\r\n    For a full documentation of the schema please refer to\r\n    http://go.microsoft.com/"
              },
              {
                "name": "Length",
                "value": "4096"
              }
            ],
            "repeated": 0,
            "id": 3074
          },
          {
            "timestamp": "2026-04-25 06:56:49,563",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3075
          },
          {
            "timestamp": "2026-04-25 06:56:49,563",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3076
          },
          {
            "timestamp": "2026-04-25 06:56:49,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3077
          },
          {
            "timestamp": "2026-04-25 06:56:49,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3078
          },
          {
            "timestamp": "2026-04-25 06:56:49,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3079
          },
          {
            "timestamp": "2026-04-25 06:56:49,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3080
          },
          {
            "timestamp": "2026-04-25 06:56:49,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3081
          },
          {
            "timestamp": "2026-04-25 06:56:49,657",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362d89",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3082
          },
          {
            "timestamp": "2026-04-25 06:56:49,657",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362d89",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3083
          },
          {
            "timestamp": "2026-04-25 06:56:49,657",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3084
          },
          {
            "timestamp": "2026-04-25 06:56:49,657",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3085
          },
          {
            "timestamp": "2026-04-25 06:56:49,657",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3086
          },
          {
            "timestamp": "2026-04-25 06:56:49,657",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3087
          },
          {
            "timestamp": "2026-04-25 06:56:49,657",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08370000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3088
          },
          {
            "timestamp": "2026-04-25 06:56:49,688",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08365000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3089
          },
          {
            "timestamp": "2026-04-25 06:56:49,688",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f8b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3090
          },
          {
            "timestamp": "2026-04-25 06:56:49,688",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08370000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3091
          },
          {
            "timestamp": "2026-04-25 06:56:49,688",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3092
          },
          {
            "timestamp": "2026-04-25 06:56:49,688",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3093
          },
          {
            "timestamp": "2026-04-25 06:56:49,688",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3094
          },
          {
            "timestamp": "2026-04-25 06:56:49,688",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08364195",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3095
          },
          {
            "timestamp": "2026-04-25 06:56:49,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3096
          },
          {
            "timestamp": "2026-04-25 06:56:49,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3097
          },
          {
            "timestamp": "2026-04-25 06:56:49,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3098
          },
          {
            "timestamp": "2026-04-25 06:56:49,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3099
          },
          {
            "timestamp": "2026-04-25 06:56:49,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3100
          },
          {
            "timestamp": "2026-04-25 06:56:49,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3101
          },
          {
            "timestamp": "2026-04-25 06:56:49,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3102
          },
          {
            "timestamp": "2026-04-25 06:56:49,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3103
          },
          {
            "timestamp": "2026-04-25 06:56:49,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3104
          },
          {
            "timestamp": "2026-04-25 06:56:49,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3105
          },
          {
            "timestamp": "2026-04-25 06:56:49,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3106
          },
          {
            "timestamp": "2026-04-25 06:56:49,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "16"
              }
            ],
            "repeated": 0,
            "id": 3107
          },
          {
            "timestamp": "2026-04-25 06:56:49,907",
            "thread_id": "6948",
            "caller": "0x083658b8",
            "parentcaller": "0x08364bba",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05622000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3108
          },
          {
            "timestamp": "2026-04-25 06:56:49,907",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x08364354",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000520"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "a5c561934e089\">\r\n            <section name=\"schemaImporterExtensions\" type=\"System.Xml.Serialization.Configuration.SchemaImporterExtensionsSection, System.Xml, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\"/>\r\n            <section name="
              },
              {
                "name": "Length",
                "value": "4096"
              }
            ],
            "repeated": 0,
            "id": 3109
          },
          {
            "timestamp": "2026-04-25 06:56:49,922",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3110
          },
          {
            "timestamp": "2026-04-25 06:56:49,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3111
          },
          {
            "timestamp": "2026-04-25 06:56:49,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "19"
              }
            ],
            "repeated": 0,
            "id": 3112
          },
          {
            "timestamp": "2026-04-25 06:56:49,938",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x08364354",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000520"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "ientTargetSection, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a\"/>\r\n            <section name=\"compilation\" type=\"System.Web.Configuration.CompilationSection, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03"
              },
              {
                "name": "Length",
                "value": "12288"
              }
            ],
            "repeated": 0,
            "id": 3113
          },
          {
            "timestamp": "2026-04-25 06:56:49,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3114
          },
          {
            "timestamp": "2026-04-25 06:56:49,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3115
          },
          {
            "timestamp": "2026-04-25 06:56:49,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3116
          },
          {
            "timestamp": "2026-04-25 06:56:49,969",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08362dcd",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08366000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3117
          },
          {
            "timestamp": "2026-04-25 06:56:49,969",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3118
          },
          {
            "timestamp": "2026-04-25 06:56:49,969",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3119
          },
          {
            "timestamp": "2026-04-25 06:56:49,969",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3120
          },
          {
            "timestamp": "2026-04-25 06:56:49,969",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3121
          },
          {
            "timestamp": "2026-04-25 06:56:49,969",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08370000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3122
          },
          {
            "timestamp": "2026-04-25 06:56:49,969",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08380000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3123
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08367000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3124
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f8c000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3125
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08380000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3126
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08370000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3127
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3128
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3129
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3130
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366005",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3131
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08366f47",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08302000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3132
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08367972",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3133
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08367972",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3134
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08367972",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3135
          },
          {
            "timestamp": "2026-04-25 06:56:49,985",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08367972",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3136
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08367a93",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08368000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3137
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836710e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f8d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3138
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x08368852",
            "category": "filesystem",
            "api": "NtReadFile",
            "status": false,
            "return": "0xffffffffc0000011",
            "pretty_return": "END_OF_FILE",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000520"
              },
              {
                "name": "HandleName",
                "value": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
              },
              {
                "name": "Buffer",
                "value": "mework Data Provider for Odbc\" type=\"System.Data.Odbc.OdbcFactory, System.Data, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\"/>\r\n           <add name=\"OleDb Data Provider\" invariant=\"System.Data.OleDb\" description=\".Net Framework Data "
              },
              {
                "name": "Length",
                "value": "5555"
              }
            ],
            "repeated": 0,
            "id": 3139
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x0788019e",
            "parentcaller": "0x083688c7",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000520"
              }
            ],
            "repeated": 0,
            "id": 3140
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x083623d2",
            "parentcaller": "0x08361f84",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05632000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3141
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000520"
              }
            ],
            "repeated": 0,
            "id": 3142
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000508"
              }
            ],
            "repeated": 0,
            "id": 3143
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 3144
          },
          {
            "timestamp": "2026-04-25 06:56:50,001",
            "thread_id": "6948",
            "caller": "0x07880994",
            "parentcaller": "0x08363bcd",
            "category": "filesystem",
            "api": "NtQueryFullAttributesFile",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "FileName",
                "value": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe.config"
              }
            ],
            "repeated": 1,
            "id": 3145
          },
          {
            "timestamp": "2026-04-25 06:56:50,016",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000524"
              }
            ],
            "repeated": 0,
            "id": 3146
          },
          {
            "timestamp": "2026-04-25 06:56:50,016",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000528"
              }
            ],
            "repeated": 0,
            "id": 3147
          },
          {
            "timestamp": "2026-04-25 06:56:50,016",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08368dcc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3148
          },
          {
            "timestamp": "2026-04-25 06:56:50,016",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08368dcc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3149
          },
          {
            "timestamp": "2026-04-25 06:56:50,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3150
          },
          {
            "timestamp": "2026-04-25 06:56:50,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3151
          },
          {
            "timestamp": "2026-04-25 06:56:50,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3152
          },
          {
            "timestamp": "2026-04-25 06:56:50,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08368dcc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08369000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3153
          },
          {
            "timestamp": "2026-04-25 06:56:50,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08368dcc",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3154
          },
          {
            "timestamp": "2026-04-25 06:56:50,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08368dcc",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3155
          },
          {
            "timestamp": "2026-04-25 06:56:50,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08368fd9",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3156
          },
          {
            "timestamp": "2026-04-25 06:56:50,063",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08368fd9",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3157
          },
          {
            "timestamp": "2026-04-25 06:56:50,079",
            "thread_id": "6948",
            "caller": "0x08369834",
            "parentcaller": "0x083696dd",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f8e000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3158
          },
          {
            "timestamp": "2026-04-25 06:56:50,079",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369a31",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "mscoree.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x74160000"
              }
            ],
            "repeated": 0,
            "id": 3159
          },
          {
            "timestamp": "2026-04-25 06:56:50,079",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369a31",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x74160000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "mscoree.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3160
          },
          {
            "timestamp": "2026-04-25 06:56:50,079",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369a31",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "MSCOREE.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x74160000"
              },
              {
                "name": "FunctionName",
                "value": "ND_RI2"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x74173a30"
              }
            ],
            "repeated": 0,
            "id": 3161
          },
          {
            "timestamp": "2026-04-25 06:56:50,079",
            "thread_id": "6948",
            "caller": "0x07881ad9",
            "parentcaller": "0x08369a31",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "ND_RI2_RetAddr"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3162
          },
          {
            "timestamp": "2026-04-25 06:56:50,079",
            "thread_id": "6948",
            "caller": "0x07881ad9",
            "parentcaller": "0x08369a31",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "mscoreei.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x73db0000"
              },
              {
                "name": "FunctionName",
                "value": "ND_RI2"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x73dc4610"
              }
            ],
            "repeated": 0,
            "id": 3163
          },
          {
            "timestamp": "2026-04-25 06:56:50,079",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x0000052c"
              }
            ],
            "repeated": 0,
            "id": 3164
          },
          {
            "timestamp": "2026-04-25 06:56:50,094",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369d72",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3165
          },
          {
            "timestamp": "2026-04-25 06:56:50,094",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3166
          },
          {
            "timestamp": "2026-04-25 06:56:50,094",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3167
          },
          {
            "timestamp": "2026-04-25 06:56:50,110",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369d72",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08320000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3168
          },
          {
            "timestamp": "2026-04-25 06:56:50,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3169
          },
          {
            "timestamp": "2026-04-25 06:56:50,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3170
          },
          {
            "timestamp": "2026-04-25 06:56:50,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3171
          },
          {
            "timestamp": "2026-04-25 06:56:50,126",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369ecc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08303000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3172
          },
          {
            "timestamp": "2026-04-25 06:56:50,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369fb8",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0836a000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3173
          },
          {
            "timestamp": "2026-04-25 06:56:50,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3174
          },
          {
            "timestamp": "2026-04-25 06:56:50,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe0626",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3175
          },
          {
            "timestamp": "2026-04-25 06:56:50,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836a371",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3176
          },
          {
            "timestamp": "2026-04-25 06:56:50,157",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836a371",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3177
          },
          {
            "timestamp": "2026-04-25 06:56:50,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369ecc",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07f8f000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3178
          },
          {
            "timestamp": "2026-04-25 06:56:50,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369de2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3179
          },
          {
            "timestamp": "2026-04-25 06:56:50,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369de2",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3180
          },
          {
            "timestamp": "2026-04-25 06:56:50,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369de2",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3181
          },
          {
            "timestamp": "2026-04-25 06:56:50,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369de2",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3182
          },
          {
            "timestamp": "2026-04-25 06:56:50,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3183
          },
          {
            "timestamp": "2026-04-25 06:56:50,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3184
          },
          {
            "timestamp": "2026-04-25 06:56:50,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3185
          },
          {
            "timestamp": "2026-04-25 06:56:50,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836ac9d",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0836b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3186
          },
          {
            "timestamp": "2026-04-25 06:56:50,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369e0f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08304000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3187
          },
          {
            "timestamp": "2026-04-25 06:56:50,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369e0f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3188
          },
          {
            "timestamp": "2026-04-25 06:56:50,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369e0f",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3189
          },
          {
            "timestamp": "2026-04-25 06:56:50,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836b2d6",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3190
          },
          {
            "timestamp": "2026-04-25 06:56:50,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836b2d6",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3191
          },
          {
            "timestamp": "2026-04-25 06:56:50,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836bc63",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000001",
                "pretty_value": "PAGE_NOACCESS"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3192
          },
          {
            "timestamp": "2026-04-25 06:56:50,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836bc63",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08330000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3193
          },
          {
            "timestamp": "2026-04-25 06:56:50,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836bf3b",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0836c000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3194
          },
          {
            "timestamp": "2026-04-25 06:56:50,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836c2be",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3195
          },
          {
            "timestamp": "2026-04-25 06:56:50,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836c2be",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3196
          },
          {
            "timestamp": "2026-04-25 06:56:50,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836c4ff",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3197
          },
          {
            "timestamp": "2026-04-25 06:56:50,219",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836c4ff",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3198
          },
          {
            "timestamp": "2026-04-25 06:56:50,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836cb33",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3199
          },
          {
            "timestamp": "2026-04-25 06:56:50,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836cb33",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3200
          },
          {
            "timestamp": "2026-04-25 06:56:50,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836cce0",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0836d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3201
          },
          {
            "timestamp": "2026-04-25 06:56:50,235",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x08369ac4",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08331000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3202
          },
          {
            "timestamp": "2026-04-25 06:56:50,235",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000510"
              }
            ],
            "repeated": 0,
            "id": 3203
          },
          {
            "timestamp": "2026-04-25 06:56:50,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3204
          },
          {
            "timestamp": "2026-04-25 06:56:50,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3205
          },
          {
            "timestamp": "2026-04-25 06:56:50,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3206
          },
          {
            "timestamp": "2026-04-25 06:56:50,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3207
          },
          {
            "timestamp": "2026-04-25 06:56:50,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3208
          },
          {
            "timestamp": "2026-04-25 06:56:50,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3209
          },
          {
            "timestamp": "2026-04-25 06:56:50,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3210
          },
          {
            "timestamp": "2026-04-25 06:56:50,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3211
          },
          {
            "timestamp": "2026-04-25 06:56:50,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3212
          },
          {
            "timestamp": "2026-04-25 06:56:50,407",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": false,
            "return": "0xffffffffc0000135",
            "pretty_return": "DLL_NOT_FOUND",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\ws2_32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3213
          },
          {
            "timestamp": "2026-04-25 06:56:50,407",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\ws2_32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000008"
              }
            ],
            "repeated": 0,
            "id": 3214
          },
          {
            "timestamp": "2026-04-25 06:56:50,407",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "ws2_32.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x76640000"
              }
            ],
            "repeated": 0,
            "id": 3215
          },
          {
            "timestamp": "2026-04-25 06:56:50,407",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LoadLibraryExW",
            "status": true,
            "return": "0x76640000",
            "arguments": [
              {
                "name": "lpLibFileName",
                "value": "ws2_32.dll"
              },
              {
                "name": "dwFlags",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3216
          },
          {
            "timestamp": "2026-04-25 06:56:50,407",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "WSAStartup"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76649cc0"
              }
            ],
            "repeated": 0,
            "id": 3217
          },
          {
            "timestamp": "2026-04-25 06:56:50,407",
            "thread_id": "6948",
            "caller": "0x0288a110",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "WSAStartup",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "VersionRequested",
                "value": "0x00000202"
              }
            ],
            "repeated": 0,
            "id": 3218
          },
          {
            "timestamp": "2026-04-25 06:56:50,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3219
          },
          {
            "timestamp": "2026-04-25 06:56:50,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3220
          },
          {
            "timestamp": "2026-04-25 06:56:50,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3221
          },
          {
            "timestamp": "2026-04-25 06:56:50,485",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x04fe2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3222
          },
          {
            "timestamp": "2026-04-25 06:56:50,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3223
          },
          {
            "timestamp": "2026-04-25 06:56:50,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3224
          },
          {
            "timestamp": "2026-04-25 06:56:50,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3225
          },
          {
            "timestamp": "2026-04-25 06:56:50,532",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x04fe4000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3226
          },
          {
            "timestamp": "2026-04-25 06:56:50,532",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x0000053c"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000009",
                "pretty_value": "KEY_QUERY_VALUE|KEY_ENUMERATE_SUB_KEYS"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              }
            ],
            "repeated": 0,
            "id": 3227
          },
          {
            "timestamp": "2026-04-25 06:56:50,532",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x0000053c"
              },
              {
                "name": "ValueName",
                "value": "ResourcePolicies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies"
              }
            ],
            "repeated": 0,
            "id": 3228
          },
          {
            "timestamp": "2026-04-25 06:56:50,532",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000053c"
              }
            ],
            "repeated": 0,
            "id": 3229
          },
          {
            "timestamp": "2026-04-25 06:56:50,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3230
          },
          {
            "timestamp": "2026-04-25 06:56:50,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3231
          },
          {
            "timestamp": "2026-04-25 06:56:50,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3232
          },
          {
            "timestamp": "2026-04-25 06:56:50,626",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3233
          },
          {
            "timestamp": "2026-04-25 06:56:50,626",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3234
          },
          {
            "timestamp": "2026-04-25 06:56:50,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3235
          },
          {
            "timestamp": "2026-04-25 06:56:50,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3236
          },
          {
            "timestamp": "2026-04-25 06:56:50,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3237
          },
          {
            "timestamp": "2026-04-25 06:56:50,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3238
          },
          {
            "timestamp": "2026-04-25 06:56:50,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3239
          },
          {
            "timestamp": "2026-04-25 06:56:50,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3240
          },
          {
            "timestamp": "2026-04-25 06:56:50,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3241
          },
          {
            "timestamp": "2026-04-25 06:56:50,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3242
          },
          {
            "timestamp": "2026-04-25 06:56:50,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3243
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00008000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3244
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08340000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3245
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "WSASocket"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3246
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "WSASocketW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664cbc0"
              }
            ],
            "repeated": 0,
            "id": 3247
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x07881bac",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "setsockopt"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664f070"
              }
            ],
            "repeated": 0,
            "id": 3248
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x07881bac",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "WSAEventSelect"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664c860"
              }
            ],
            "repeated": 0,
            "id": 3249
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x07881bac",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "ioctlsocket"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76652520"
              }
            ],
            "repeated": 0,
            "id": 3250
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x07881bac",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "closesocket"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664ea60"
              }
            ],
            "repeated": 0,
            "id": 3251
          },
          {
            "timestamp": "2026-04-25 06:56:50,829",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\system32\\mswsock"
              },
              {
                "name": "DllBase",
                "value": "0x747c0000"
              }
            ],
            "repeated": 0,
            "id": 3252
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\mswsock.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x747c0000"
              }
            ],
            "repeated": 0,
            "id": 3253
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000544",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "2",
                "pretty_value": "SOCK_DGRAM"
              },
              {
                "name": "protocol",
                "value": "0"
              },
              {
                "name": "socket",
                "value": "1348"
              }
            ],
            "repeated": 0,
            "id": 3254
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881ca6",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "setsockopt",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 3255
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x0288a7be",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              }
            ],
            "repeated": 0,
            "id": 3256
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\mswsock.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x747c0000"
              }
            ],
            "repeated": 0,
            "id": 3257
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000544",
            "arguments": [
              {
                "name": "af",
                "value": "23",
                "pretty_value": "AF_INET6"
              },
              {
                "name": "type",
                "value": "2",
                "pretty_value": "SOCK_DGRAM"
              },
              {
                "name": "protocol",
                "value": "0"
              },
              {
                "name": "socket",
                "value": "1348"
              }
            ],
            "repeated": 0,
            "id": 3258
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881ca6",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "setsockopt",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 3259
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x0288a7be",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              }
            ],
            "repeated": 0,
            "id": 3260
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x00000544"
              }
            ],
            "repeated": 0,
            "id": 3261
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x07881806",
            "parentcaller": "0x083636cd",
            "category": "process",
            "api": "NtOpenProcessToken",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "DesiredAccess",
                "value": "0x02000000"
              },
              {
                "name": "TokenHandle",
                "value": "0x0000054c"
              }
            ],
            "repeated": 0,
            "id": 3262
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836dd83",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3263
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836dd83",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3264
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentProcessId"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2e90"
              }
            ],
            "repeated": 0,
            "id": 3265
          },
          {
            "timestamp": "2026-04-25 06:56:50,844",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetCurrentProcessIdW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3266
          },
          {
            "timestamp": "2026-04-25 06:56:50,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3267
          },
          {
            "timestamp": "2026-04-25 06:56:50,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3268
          },
          {
            "timestamp": "2026-04-25 06:56:50,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3269
          },
          {
            "timestamp": "2026-04-25 06:56:50,938",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3270
          },
          {
            "timestamp": "2026-04-25 06:56:50,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3271
          },
          {
            "timestamp": "2026-04-25 06:56:50,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3272
          },
          {
            "timestamp": "2026-04-25 06:56:50,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3273
          },
          {
            "timestamp": "2026-04-25 06:56:50,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3274
          },
          {
            "timestamp": "2026-04-25 06:56:51,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3275
          },
          {
            "timestamp": "2026-04-25 06:56:51,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3276
          },
          {
            "timestamp": "2026-04-25 06:56:51,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3277
          },
          {
            "timestamp": "2026-04-25 06:56:51,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3278
          },
          {
            "timestamp": "2026-04-25 06:56:51,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3279
          },
          {
            "timestamp": "2026-04-25 06:56:51,079",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetComputerName"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3280
          },
          {
            "timestamp": "2026-04-25 06:56:51,079",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetComputerNameW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad13a0"
              }
            ],
            "repeated": 0,
            "id": 3281
          },
          {
            "timestamp": "2026-04-25 06:56:51,079",
            "thread_id": "6948",
            "caller": "0x0288afec",
            "parentcaller": "0x0507ee1e",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 3282
          },
          {
            "timestamp": "2026-04-25 06:56:51,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3283
          },
          {
            "timestamp": "2026-04-25 06:56:51,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3284
          },
          {
            "timestamp": "2026-04-25 06:56:51,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3285
          },
          {
            "timestamp": "2026-04-25 06:56:51,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3286
          },
          {
            "timestamp": "2026-04-25 06:56:51,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3287
          },
          {
            "timestamp": "2026-04-25 06:56:51,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3288
          },
          {
            "timestamp": "2026-04-25 06:56:51,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3289
          },
          {
            "timestamp": "2026-04-25 06:56:51,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3290
          },
          {
            "timestamp": "2026-04-25 06:56:51,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3291
          },
          {
            "timestamp": "2026-04-25 06:56:51,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3292
          },
          {
            "timestamp": "2026-04-25 06:56:51,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3293
          },
          {
            "timestamp": "2026-04-25 06:56:51,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4"
              }
            ],
            "repeated": 0,
            "id": 3294
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288aab3",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance"
              },
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance"
              }
            ],
            "repeated": 0,
            "id": 3295
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288abb6",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "Library"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Library"
              }
            ],
            "repeated": 0,
            "id": 3296
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x078816c8",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "Library"
              },
              {
                "name": "Data",
                "value": "%systemroot%\\system32\\netfxperf.dll"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Library"
              }
            ],
            "repeated": 0,
            "id": 3297
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288abb6",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "IsMultiInstance"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\IsMultiInstance"
              }
            ],
            "repeated": 0,
            "id": 3298
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880816",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "IsMultiInstance"
              },
              {
                "name": "Data",
                "value": "1"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\IsMultiInstance"
              }
            ],
            "repeated": 0,
            "id": 3299
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05642000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3300
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288abb6",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "First Counter"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\First Counter"
              }
            ],
            "repeated": 0,
            "id": 3301
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880816",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "First Counter"
              },
              {
                "name": "Data",
                "value": "6828"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\First Counter"
              }
            ],
            "repeated": 0,
            "id": 3302
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 0,
            "id": 3303
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288aab3",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegOpenKeyExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Registry",
                "value": "0x80000002",
                "pretty_value": "HKEY_LOCAL_MACHINE"
              },
              {
                "name": "SubKey",
                "value": "SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance"
              },
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance"
              }
            ],
            "repeated": 0,
            "id": 3304
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288abb6",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "CategoryOptions"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\CategoryOptions"
              }
            ],
            "repeated": 0,
            "id": 3305
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880816",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "CategoryOptions"
              },
              {
                "name": "Data",
                "value": "3"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\CategoryOptions"
              }
            ],
            "repeated": 0,
            "id": 3306
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288abb6",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "FileMappingSize"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\FileMappingSize"
              }
            ],
            "repeated": 0,
            "id": 3307
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880816",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "FileMappingSize"
              },
              {
                "name": "Data",
                "value": "131072"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\FileMappingSize"
              }
            ],
            "repeated": 0,
            "id": 3308
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288abb6",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "Counter Names"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Counter Names"
              }
            ],
            "repeated": 0,
            "id": 3309
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0288abb6",
            "parentcaller": "0x0507ee1e",
            "category": "registry",
            "api": "RegQueryValueExW",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "ValueName",
                "value": "Counter Names"
              },
              {
                "name": "Data",
                "value": "C\\x00o\\x00n\\x00n\\x00e\\x00c\\x00t\\x00i\\x00o\\x00n\\x00s\\x00 \\x00E\\x00s\\x00t\\x00a\\x00b\\x00l\\x00i\\x00s\\x00h\\x00e\\x00d\\x00\\x00\\x00B\\x00y\\x00t\\x00e\\x00s\\x00 \\x00R\\x00e\\x00c\\x00e\\x00i\\x00v\\x00e\\x00d\\x00\\x00\\x00B\\x00y\\x00t\\x00e\\x00s\\x00 \\x00S\\x00e\\x00n\\x00t\\x00\\x00\\x00D\\x00a\\x00t\\x00a\\x00g\\x00r\\x00a\\x00m\\x00s\\x00 \\x00R\\x00e\\x00c\\x00e\\x00i\\x00v\\x00e\\x00d\\x00\\x00\\x00D\\x00a\\x00t\\x00a\\x00g\\x00r\\x00a\\x00m\\x00s\\x00 \\x00S\\x00e\\x00n\\x00t\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Counter Names"
              }
            ],
            "repeated": 0,
            "id": 3310
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "ConvertStringSecurityDescriptorToSecurityDescriptor"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3311
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "ConvertStringSecurityDescriptorToSecurityDescriptorW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76eb86d0"
              }
            ],
            "repeated": 0,
            "id": 3312
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07881ef4",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "LocalFree"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acf530"
              }
            ],
            "repeated": 0,
            "id": 3313
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateFileMapping"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3314
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateFileMappingW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad04a0"
              }
            ],
            "repeated": 0,
            "id": 3315
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07882000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3316
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07882017",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CloseHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2ee0"
              }
            ],
            "repeated": 0,
            "id": 3317
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07882017",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtCreateSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000550"
              },
              {
                "name": "DesiredAccess",
                "value": "0x000f0007",
                "pretty_value": "STANDARD_RIGHTS_REQUIRED|SECTION_QUERY|SECTION_MAP_READ|SECTION_MAP_WRITE"
              },
              {
                "name": "ObjectAttributes",
                "value": "Global\\netfxcustomperfcounters.1.0.net clr networking"
              },
              {
                "name": "FileHandle",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 3318
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "MapViewOfFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acf590"
              }
            ],
            "repeated": 0,
            "id": 3319
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788209c",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "UnmapViewOfFile"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad05d0"
              }
            ],
            "repeated": 0,
            "id": 3320
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x078820c8",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtMapViewOfSection",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SectionHandle",
                "value": "0x00000550"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08370000"
              },
              {
                "name": "SectionOffset",
                "value": "0x07f5f680"
              },
              {
                "name": "ViewSize",
                "value": "0x00020000"
              },
              {
                "name": "Win32Protect",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3321
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "VirtualQuery"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acf570"
              }
            ],
            "repeated": 0,
            "id": 3322
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "registry",
            "api": "RegCloseKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 0,
            "id": 3323
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateWellKnownSid"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ec0440"
              }
            ],
            "repeated": 0,
            "id": 3324
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ADVAPI32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ea0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateWellKnownSidW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3325
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3326
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "WaitForSingleObject"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad30d0"
              }
            ],
            "repeated": 0,
            "id": 3327
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3328
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3329
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": false,
            "return": "0xffffffffc0000022",
            "pretty_return": "ACCESS_DENIED",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000000"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3330
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenMutex"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3331
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenMutexW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3020"
              }
            ],
            "repeated": 0,
            "id": 3332
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07882433",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtOpenMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000554"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              }
            ],
            "repeated": 0,
            "id": 3333
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3334
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000554"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3335
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000554"
              }
            ],
            "repeated": 1,
            "id": 3336
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CloseHandle"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2ee0"
              }
            ],
            "repeated": 0,
            "id": 3337
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcess"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad0630"
              }
            ],
            "repeated": 0,
            "id": 3338
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "OpenProcessW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3339
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788252b",
            "parentcaller": "0x0507ee1e",
            "category": "process",
            "api": "NtOpenProcess",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0x00000554"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000400",
                "pretty_value": "PROCESS_QUERY_INFORMATION"
              },
              {
                "name": "ProcessIdentifier",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 3340
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcessTimes"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76acf320"
              }
            ],
            "repeated": 0,
            "id": 3341
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetProcessTimesW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3342
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788019e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000554"
              }
            ],
            "repeated": 0,
            "id": 3343
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3344
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3345
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3346
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3347
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3348
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3349
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3350
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3351
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3352
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3353
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3354
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3355
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3356
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3357
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3358
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3359
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3360
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3361
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3362
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3363
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3364
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3365
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3366
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3367
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3368
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3369
          },
          {
            "timestamp": "2026-04-25 06:56:51,313",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3370
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3371
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3372
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3373
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3374
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3375
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3376
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3377
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3378
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3379
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3380
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3381
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3382
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3383
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3384
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x07880503",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtCreateMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "MutexName",
                "value": "Global\\.net clr networking"
              },
              {
                "name": "InitialOwner",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3385
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3386
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788234e",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              },
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3387
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3388
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "6948",
            "caller": "0x0788040b",
            "parentcaller": "0x0507ee1e",
            "category": "synchronization",
            "api": "NtReleaseMutant",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000548"
              }
            ],
            "repeated": 1,
            "id": 3389
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3390
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3391
          },
          {
            "timestamp": "2026-04-25 06:56:51,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3392
          },
          {
            "timestamp": "2026-04-25 06:56:51,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3393
          },
          {
            "timestamp": "2026-04-25 06:56:51,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3394
          },
          {
            "timestamp": "2026-04-25 06:56:51,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3395
          },
          {
            "timestamp": "2026-04-25 06:56:51,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3396
          },
          {
            "timestamp": "2026-04-25 06:56:51,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3397
          },
          {
            "timestamp": "2026-04-25 06:56:51,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3398
          },
          {
            "timestamp": "2026-04-25 06:56:51,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3399
          },
          {
            "timestamp": "2026-04-25 06:56:51,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3400
          },
          {
            "timestamp": "2026-04-25 06:56:51,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3401
          },
          {
            "timestamp": "2026-04-25 06:56:51,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3402
          },
          {
            "timestamp": "2026-04-25 06:56:51,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3403
          },
          {
            "timestamp": "2026-04-25 06:56:51,594",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "getaddrinfo"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664a810"
              }
            ],
            "repeated": 0,
            "id": 3404
          },
          {
            "timestamp": "2026-04-25 06:56:51,594",
            "thread_id": "6948",
            "caller": "0x078826ff",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "freeaddrinfo"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76647580"
              }
            ],
            "repeated": 0,
            "id": 3405
          },
          {
            "timestamp": "2026-04-25 06:56:51,626",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\mswsock.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x747c0000"
              }
            ],
            "repeated": 0,
            "id": 3406
          },
          {
            "timestamp": "2026-04-25 06:56:51,626",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\DNSAPI"
              },
              {
                "name": "DllBase",
                "value": "0x715d0000"
              }
            ],
            "repeated": 0,
            "id": 3407
          },
          {
            "timestamp": "2026-04-25 06:56:51,626",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\SYSTEM32\\IPHLPAPI"
              },
              {
                "name": "DllBase",
                "value": "0x74bb0000"
              }
            ],
            "repeated": 0,
            "id": 3408
          },
          {
            "timestamp": "2026-04-25 06:56:51,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3409
          },
          {
            "timestamp": "2026-04-25 06:56:51,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3410
          },
          {
            "timestamp": "2026-04-25 06:56:51,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3411
          },
          {
            "timestamp": "2026-04-25 06:56:51,641",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3412
          },
          {
            "timestamp": "2026-04-25 06:56:51,641",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\NSI"
              },
              {
                "name": "DllBase",
                "value": "0x77e20000"
              }
            ],
            "repeated": 0,
            "id": 3413
          },
          {
            "timestamp": "2026-04-25 06:56:51,657",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\rasadhlp"
              },
              {
                "name": "DllBase",
                "value": "0x73e70000"
              }
            ],
            "repeated": 0,
            "id": 3414
          },
          {
            "timestamp": "2026-04-25 06:56:51,657",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\rasadhlp.dll"
              },
              {
                "name": "BaseAddress",
                "value": "0x73e70000"
              }
            ],
            "repeated": 0,
            "id": 3415
          },
          {
            "timestamp": "2026-04-25 06:56:51,657",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3416
          },
          {
            "timestamp": "2026-04-25 06:56:51,657",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3417
          },
          {
            "timestamp": "2026-04-25 06:56:51,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3418
          },
          {
            "timestamp": "2026-04-25 06:56:51,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3419
          },
          {
            "timestamp": "2026-04-25 06:56:51,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3420
          },
          {
            "timestamp": "2026-04-25 06:56:51,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3421
          },
          {
            "timestamp": "2026-04-25 06:56:51,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3422
          },
          {
            "timestamp": "2026-04-25 06:56:51,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3423
          },
          {
            "timestamp": "2026-04-25 06:56:51,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3424
          },
          {
            "timestamp": "2026-04-25 06:56:51,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3425
          },
          {
            "timestamp": "2026-04-25 06:56:51,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3426
          },
          {
            "timestamp": "2026-04-25 06:56:51,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3427
          },
          {
            "timestamp": "2026-04-25 06:56:51,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 3428
          },
          {
            "timestamp": "2026-04-25 06:56:51,954",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3429
          },
          {
            "timestamp": "2026-04-25 06:56:51,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3430
          },
          {
            "timestamp": "2026-04-25 06:56:51,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3431
          },
          {
            "timestamp": "2026-04-25 06:56:51,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3432
          },
          {
            "timestamp": "2026-04-25 06:56:51,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3433
          },
          {
            "timestamp": "2026-04-25 06:56:52,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3434
          },
          {
            "timestamp": "2026-04-25 06:56:52,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3435
          },
          {
            "timestamp": "2026-04-25 06:56:52,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3436
          },
          {
            "timestamp": "2026-04-25 06:56:52,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3437
          },
          {
            "timestamp": "2026-04-25 06:56:52,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3438
          },
          {
            "timestamp": "2026-04-25 06:56:52,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3439
          },
          {
            "timestamp": "2026-04-25 06:56:52,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3440
          },
          {
            "timestamp": "2026-04-25 06:56:52,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3441
          },
          {
            "timestamp": "2026-04-25 06:56:52,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3442
          },
          {
            "timestamp": "2026-04-25 06:56:52,172",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3443
          },
          {
            "timestamp": "2026-04-25 06:56:52,172",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3444
          },
          {
            "timestamp": "2026-04-25 06:56:52,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3445
          },
          {
            "timestamp": "2026-04-25 06:56:52,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3446
          },
          {
            "timestamp": "2026-04-25 06:56:52,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3447
          },
          {
            "timestamp": "2026-04-25 06:56:52,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3448
          },
          {
            "timestamp": "2026-04-25 06:56:52,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3449
          },
          {
            "timestamp": "2026-04-25 06:56:52,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3450
          },
          {
            "timestamp": "2026-04-25 06:56:52,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3451
          },
          {
            "timestamp": "2026-04-25 06:56:52,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3452
          },
          {
            "timestamp": "2026-04-25 06:56:52,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3453
          },
          {
            "timestamp": "2026-04-25 06:56:52,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3454
          },
          {
            "timestamp": "2026-04-25 06:56:52,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3455
          },
          {
            "timestamp": "2026-04-25 06:56:52,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3456
          },
          {
            "timestamp": "2026-04-25 06:56:52,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3457
          },
          {
            "timestamp": "2026-04-25 06:56:52,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3458
          },
          {
            "timestamp": "2026-04-25 06:56:52,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3459
          },
          {
            "timestamp": "2026-04-25 06:56:52,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3460
          },
          {
            "timestamp": "2026-04-25 06:56:52,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3461
          },
          {
            "timestamp": "2026-04-25 06:56:52,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3462
          },
          {
            "timestamp": "2026-04-25 06:56:52,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3463
          },
          {
            "timestamp": "2026-04-25 06:56:52,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3464
          },
          {
            "timestamp": "2026-04-25 06:56:52,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3465
          },
          {
            "timestamp": "2026-04-25 06:56:52,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3466
          },
          {
            "timestamp": "2026-04-25 06:56:52,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3467
          },
          {
            "timestamp": "2026-04-25 06:56:52,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3468
          },
          {
            "timestamp": "2026-04-25 06:56:52,672",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3469
          },
          {
            "timestamp": "2026-04-25 06:56:52,672",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3470
          },
          {
            "timestamp": "2026-04-25 06:56:52,719",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "DllLoadNotification",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NotificationReason",
                "value": "load"
              },
              {
                "name": "DllName",
                "value": "C:\\Windows\\System32\\fwpuclnt"
              },
              {
                "name": "DllBase",
                "value": "0x71570000"
              }
            ],
            "repeated": 0,
            "id": 3471
          },
          {
            "timestamp": "2026-04-25 06:56:52,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3472
          },
          {
            "timestamp": "2026-04-25 06:56:52,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3473
          },
          {
            "timestamp": "2026-04-25 06:56:52,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3474
          },
          {
            "timestamp": "2026-04-25 06:56:52,751",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "system",
            "api": "LdrLoadDll",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Flags",
                "value": "0x00000000"
              },
              {
                "name": "FileName",
                "value": "C:\\Windows\\System32\\FWPUCLNT.DLL"
              },
              {
                "name": "BaseAddress",
                "value": "0x71570000"
              }
            ],
            "repeated": 0,
            "id": 3475
          },
          {
            "timestamp": "2026-04-25 06:56:52,782",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 3476
          },
          {
            "timestamp": "2026-04-25 06:56:52,782",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507ee36",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0836e000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3477
          },
          {
            "timestamp": "2026-04-25 06:56:52,782",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 3478
          },
          {
            "timestamp": "2026-04-25 06:56:52,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3479
          },
          {
            "timestamp": "2026-04-25 06:56:52,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3480
          },
          {
            "timestamp": "2026-04-25 06:56:52,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3481
          },
          {
            "timestamp": "2026-04-25 06:56:52,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3482
          },
          {
            "timestamp": "2026-04-25 06:56:52,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3483
          },
          {
            "timestamp": "2026-04-25 06:56:52,907",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000598",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1432"
              }
            ],
            "repeated": 0,
            "id": 3484
          },
          {
            "timestamp": "2026-04-25 06:56:52,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3485
          },
          {
            "timestamp": "2026-04-25 06:56:52,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3486
          },
          {
            "timestamp": "2026-04-25 06:56:52,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "16"
              }
            ],
            "repeated": 0,
            "id": 3487
          },
          {
            "timestamp": "2026-04-25 06:56:52,954",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3488
          },
          {
            "timestamp": "2026-04-25 06:56:52,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3489
          },
          {
            "timestamp": "2026-04-25 06:56:52,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "34"
              }
            ],
            "repeated": 0,
            "id": 3490
          },
          {
            "timestamp": "2026-04-25 06:56:53,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3491
          },
          {
            "timestamp": "2026-04-25 06:56:53,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3492
          },
          {
            "timestamp": "2026-04-25 06:56:53,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3493
          },
          {
            "timestamp": "2026-04-25 06:56:53,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3494
          },
          {
            "timestamp": "2026-04-25 06:56:53,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3495
          },
          {
            "timestamp": "2026-04-25 06:56:53,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3496
          },
          {
            "timestamp": "2026-04-25 06:56:53,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3497
          },
          {
            "timestamp": "2026-04-25 06:56:53,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3498
          },
          {
            "timestamp": "2026-04-25 06:56:53,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3499
          },
          {
            "timestamp": "2026-04-25 06:56:53,172",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836dff8",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "setsockopt"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664f070"
              }
            ],
            "repeated": 0,
            "id": 3500
          },
          {
            "timestamp": "2026-04-25 06:56:53,172",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1432"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 3501
          },
          {
            "timestamp": "2026-04-25 06:56:53,188",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3502
          },
          {
            "timestamp": "2026-04-25 06:56:53,188",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3503
          },
          {
            "timestamp": "2026-04-25 06:56:53,188",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836e19c",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "bind"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664d890"
              }
            ],
            "repeated": 0,
            "id": 3504
          },
          {
            "timestamp": "2026-04-25 06:56:53,188",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1432"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3505
          },
          {
            "timestamp": "2026-04-25 06:56:53,204",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000598"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 3506
          },
          {
            "timestamp": "2026-04-25 06:56:53,204",
            "thread_id": "6948",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836e19c",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "WSAIoctl"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664f3b0"
              }
            ],
            "repeated": 0,
            "id": 3507
          },
          {
            "timestamp": "2026-04-25 06:56:53,204",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3508
          },
          {
            "timestamp": "2026-04-25 06:56:53,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3509
          },
          {
            "timestamp": "2026-04-25 06:56:53,235",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3510
          },
          {
            "timestamp": "2026-04-25 06:56:53,235",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1432"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 3511
          },
          {
            "timestamp": "2026-04-25 06:56:53,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3512
          },
          {
            "timestamp": "2026-04-25 06:56:53,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3513
          },
          {
            "timestamp": "2026-04-25 06:56:53,266",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3514
          },
          {
            "timestamp": "2026-04-25 06:56:53,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3515
          },
          {
            "timestamp": "2026-04-25 06:56:53,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3516
          },
          {
            "timestamp": "2026-04-25 06:56:53,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3517
          },
          {
            "timestamp": "2026-04-25 06:56:53,313",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3518
          },
          {
            "timestamp": "2026-04-25 06:56:53,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3519
          },
          {
            "timestamp": "2026-04-25 06:56:53,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3520
          },
          {
            "timestamp": "2026-04-25 06:56:53,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3521
          },
          {
            "timestamp": "2026-04-25 06:56:53,360",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3522
          },
          {
            "timestamp": "2026-04-25 06:56:53,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3523
          },
          {
            "timestamp": "2026-04-25 06:56:53,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3524
          },
          {
            "timestamp": "2026-04-25 06:56:53,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3525
          },
          {
            "timestamp": "2026-04-25 06:56:53,407",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 1,
            "id": 3526
          },
          {
            "timestamp": "2026-04-25 06:56:53,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3527
          },
          {
            "timestamp": "2026-04-25 06:56:53,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3528
          },
          {
            "timestamp": "2026-04-25 06:56:53,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3529
          },
          {
            "timestamp": "2026-04-25 06:56:53,485",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 2,
            "id": 3530
          },
          {
            "timestamp": "2026-04-25 06:56:53,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3531
          },
          {
            "timestamp": "2026-04-25 06:56:53,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3532
          },
          {
            "timestamp": "2026-04-25 06:56:53,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3533
          },
          {
            "timestamp": "2026-04-25 06:56:53,547",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 1,
            "id": 3534
          },
          {
            "timestamp": "2026-04-25 06:56:53,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3535
          },
          {
            "timestamp": "2026-04-25 06:56:53,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3536
          },
          {
            "timestamp": "2026-04-25 06:56:53,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3537
          },
          {
            "timestamp": "2026-04-25 06:56:53,610",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3538
          },
          {
            "timestamp": "2026-04-25 06:56:53,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3539
          },
          {
            "timestamp": "2026-04-25 06:56:53,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3540
          },
          {
            "timestamp": "2026-04-25 06:56:53,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3541
          },
          {
            "timestamp": "2026-04-25 06:56:53,657",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 1,
            "id": 3542
          },
          {
            "timestamp": "2026-04-25 06:56:53,704",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3543
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "2616",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000005a4"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2648"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "3116"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 3544
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "2616",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000005a4",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2648"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "3116"
              }
            ],
            "repeated": 0,
            "id": 3545
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "2616",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000005a4"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "3116"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 3546
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3547
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3548
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3549
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3550
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3551
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 3552
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3553
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3554
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3555
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x083d1000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3556
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05652000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3557
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "setsockopt"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664f070"
              }
            ],
            "repeated": 0,
            "id": 3558
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1432"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 3559
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000005a4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xc0s\\x00T\\x19\\x00\\x00,\\x0c\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "3116"
              }
            ],
            "repeated": 0,
            "id": 3560
          },
          {
            "timestamp": "2026-04-25 06:56:53,735",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08332000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3561
          },
          {
            "timestamp": "2026-04-25 06:56:53,766",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3562
          },
          {
            "timestamp": "2026-04-25 06:56:53,766",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08305000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3563
          },
          {
            "timestamp": "2026-04-25 06:56:53,797",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3564
          },
          {
            "timestamp": "2026-04-25 06:56:53,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3565
          },
          {
            "timestamp": "2026-04-25 06:56:53,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3566
          },
          {
            "timestamp": "2026-04-25 06:56:53,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3567
          },
          {
            "timestamp": "2026-04-25 06:56:53,844",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3568
          },
          {
            "timestamp": "2026-04-25 06:56:53,844",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3569
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x00000000",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3570
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836e6d3",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "getpeername"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76653200"
              }
            ],
            "repeated": 0,
            "id": 3571
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 3572
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836e834",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetComputerName"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3573
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836e834",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetComputerNameW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad13a0"
              }
            ],
            "repeated": 0,
            "id": 3574
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 3575
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 3576
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836ea17",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3577
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836ea17",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x084d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3578
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836ea17",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0836f000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3579
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836ea17",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x084d0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3580
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836ea17",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3581
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 3582
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 3583
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836f4e2",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "WSASend"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664dff0"
              }
            ],
            "repeated": 0,
            "id": 3584
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1432"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 3585
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836f537",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "WS2_32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76640000"
              },
              {
                "name": "FunctionName",
                "value": "WSARecv"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x7664ed70"
              }
            ],
            "repeated": 0,
            "id": 3586
          },
          {
            "timestamp": "2026-04-25 06:56:53,860",
            "thread_id": "3116",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1432"
              }
            ],
            "repeated": 0,
            "id": 3587
          },
          {
            "timestamp": "2026-04-25 06:56:53,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3588
          },
          {
            "timestamp": "2026-04-25 06:56:53,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3589
          },
          {
            "timestamp": "2026-04-25 06:56:53,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3590
          },
          {
            "timestamp": "2026-04-25 06:56:53,876",
            "thread_id": "3172",
            "caller": "0x77eab5a6",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "3172"
              }
            ],
            "repeated": 0,
            "id": 3591
          },
          {
            "timestamp": "2026-04-25 06:56:53,876",
            "thread_id": "3172",
            "caller": "0x77eab5c9",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3592
          },
          {
            "timestamp": "2026-04-25 06:56:53,876",
            "thread_id": "160",
            "caller": "0x77eab5a6",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "160"
              }
            ],
            "repeated": 0,
            "id": 3593
          },
          {
            "timestamp": "2026-04-25 06:56:53,876",
            "thread_id": "160",
            "caller": "0x77eab5c9",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3594
          },
          {
            "timestamp": "2026-04-25 06:56:53,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3595
          },
          {
            "timestamp": "2026-04-25 06:56:53,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3596
          },
          {
            "timestamp": "2026-04-25 06:56:53,891",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836e494",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00ac0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3597
          },
          {
            "timestamp": "2026-04-25 06:56:53,891",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0836e494",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00ac0000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "FreeType",
                "value": "0x00008000"
              }
            ],
            "repeated": 0,
            "id": 3598
          },
          {
            "timestamp": "2026-04-25 06:56:53,891",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 3599
          },
          {
            "timestamp": "2026-04-25 06:56:53,891",
            "thread_id": "3116",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1432"
              }
            ],
            "repeated": 0,
            "id": 3600
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "3116",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 3601
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d53d",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": false,
            "return": "0xffffffffc0000139",
            "pretty_return": "ENTRYPOINT_NOT_FOUND",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateEvent"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 3602
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d53d",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "CreateEventW"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad2f60"
              }
            ],
            "repeated": 0,
            "id": 3603
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "6504",
            "caller": "0x04fe0626",
            "parentcaller": "0x04fe08ec",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetEvent"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad3080"
              }
            ],
            "repeated": 0,
            "id": 3604
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "3116",
            "caller": "0x04fe0626",
            "parentcaller": "0x0507d53d",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "GetExitCodeThread"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ad20e0"
              }
            ],
            "repeated": 0,
            "id": 3605
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "3116",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 3606
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 3607
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3608
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 3609
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3610
          },
          {
            "timestamp": "2026-04-25 06:56:53,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3611
          },
          {
            "timestamp": "2026-04-25 06:56:53,922",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 6,
            "id": 3612
          },
          {
            "timestamp": "2026-04-25 06:56:53,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3613
          },
          {
            "timestamp": "2026-04-25 06:56:53,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "16"
              }
            ],
            "repeated": 0,
            "id": 3614
          },
          {
            "timestamp": "2026-04-25 06:56:53,938",
            "thread_id": "3116",
            "caller": "0x05076260",
            "parentcaller": "0x0836f8a7",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x07ac5000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3615
          },
          {
            "timestamp": "2026-04-25 06:56:53,938",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x0507629c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 5,
            "id": 3616
          },
          {
            "timestamp": "2026-04-25 06:56:53,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "34"
              }
            ],
            "repeated": 0,
            "id": 3617
          },
          {
            "timestamp": "2026-04-25 06:56:53,954",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3618
          },
          {
            "timestamp": "2026-04-25 06:56:53,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3619
          },
          {
            "timestamp": "2026-04-25 06:56:54,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3620
          },
          {
            "timestamp": "2026-04-25 06:56:54,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3621
          },
          {
            "timestamp": "2026-04-25 06:56:54,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3622
          },
          {
            "timestamp": "2026-04-25 06:56:54,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3623
          },
          {
            "timestamp": "2026-04-25 06:56:54,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3624
          },
          {
            "timestamp": "2026-04-25 06:56:54,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3625
          },
          {
            "timestamp": "2026-04-25 06:56:54,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3626
          },
          {
            "timestamp": "2026-04-25 06:56:54,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3627
          },
          {
            "timestamp": "2026-04-25 06:56:54,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3628
          },
          {
            "timestamp": "2026-04-25 06:56:54,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3629
          },
          {
            "timestamp": "2026-04-25 06:56:54,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3630
          },
          {
            "timestamp": "2026-04-25 06:56:54,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3631
          },
          {
            "timestamp": "2026-04-25 06:56:54,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3632
          },
          {
            "timestamp": "2026-04-25 06:56:54,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3633
          },
          {
            "timestamp": "2026-04-25 06:56:54,266",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3634
          },
          {
            "timestamp": "2026-04-25 06:56:54,266",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3635
          },
          {
            "timestamp": "2026-04-25 06:56:54,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3636
          },
          {
            "timestamp": "2026-04-25 06:56:54,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3637
          },
          {
            "timestamp": "2026-04-25 06:56:54,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3638
          },
          {
            "timestamp": "2026-04-25 06:56:54,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3639
          },
          {
            "timestamp": "2026-04-25 06:56:54,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3640
          },
          {
            "timestamp": "2026-04-25 06:56:54,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3641
          },
          {
            "timestamp": "2026-04-25 06:56:54,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3642
          },
          {
            "timestamp": "2026-04-25 06:56:54,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3643
          },
          {
            "timestamp": "2026-04-25 06:56:54,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3644
          },
          {
            "timestamp": "2026-04-25 06:56:54,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3645
          },
          {
            "timestamp": "2026-04-25 06:56:54,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3646
          },
          {
            "timestamp": "2026-04-25 06:56:54,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3647
          },
          {
            "timestamp": "2026-04-25 06:56:54,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3648
          },
          {
            "timestamp": "2026-04-25 06:56:54,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3649
          },
          {
            "timestamp": "2026-04-25 06:56:54,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3650
          },
          {
            "timestamp": "2026-04-25 06:56:54,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3651
          },
          {
            "timestamp": "2026-04-25 06:56:54,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3652
          },
          {
            "timestamp": "2026-04-25 06:56:54,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3653
          },
          {
            "timestamp": "2026-04-25 06:56:54,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3654
          },
          {
            "timestamp": "2026-04-25 06:56:54,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3655
          },
          {
            "timestamp": "2026-04-25 06:56:54,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3656
          },
          {
            "timestamp": "2026-04-25 06:56:54,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3657
          },
          {
            "timestamp": "2026-04-25 06:56:54,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3658
          },
          {
            "timestamp": "2026-04-25 06:56:54,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3659
          },
          {
            "timestamp": "2026-04-25 06:56:54,782",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3660
          },
          {
            "timestamp": "2026-04-25 06:56:54,782",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3661
          },
          {
            "timestamp": "2026-04-25 06:56:54,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3662
          },
          {
            "timestamp": "2026-04-25 06:56:54,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3663
          },
          {
            "timestamp": "2026-04-25 06:56:54,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3664
          },
          {
            "timestamp": "2026-04-25 06:56:54,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 3665
          },
          {
            "timestamp": "2026-04-25 06:56:54,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3666
          },
          {
            "timestamp": "2026-04-25 06:56:54,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3667
          },
          {
            "timestamp": "2026-04-25 06:56:54,969",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3668
          },
          {
            "timestamp": "2026-04-25 06:56:54,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3669
          },
          {
            "timestamp": "2026-04-25 06:56:54,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3670
          },
          {
            "timestamp": "2026-04-25 06:56:54,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3671
          },
          {
            "timestamp": "2026-04-25 06:56:54,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3672
          },
          {
            "timestamp": "2026-04-25 06:56:55,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3673
          },
          {
            "timestamp": "2026-04-25 06:56:55,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3674
          },
          {
            "timestamp": "2026-04-25 06:56:55,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3675
          },
          {
            "timestamp": "2026-04-25 06:56:55,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3676
          },
          {
            "timestamp": "2026-04-25 06:56:55,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3677
          },
          {
            "timestamp": "2026-04-25 06:56:55,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3678
          },
          {
            "timestamp": "2026-04-25 06:56:55,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3679
          },
          {
            "timestamp": "2026-04-25 06:56:55,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3680
          },
          {
            "timestamp": "2026-04-25 06:56:55,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3681
          },
          {
            "timestamp": "2026-04-25 06:56:55,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3682
          },
          {
            "timestamp": "2026-04-25 06:56:55,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3683
          },
          {
            "timestamp": "2026-04-25 06:56:55,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3684
          },
          {
            "timestamp": "2026-04-25 06:56:55,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3685
          },
          {
            "timestamp": "2026-04-25 06:56:55,282",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3686
          },
          {
            "timestamp": "2026-04-25 06:56:55,282",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3687
          },
          {
            "timestamp": "2026-04-25 06:56:55,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3688
          },
          {
            "timestamp": "2026-04-25 06:56:55,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3689
          },
          {
            "timestamp": "2026-04-25 06:56:55,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3690
          },
          {
            "timestamp": "2026-04-25 06:56:55,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3691
          },
          {
            "timestamp": "2026-04-25 06:56:55,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3692
          },
          {
            "timestamp": "2026-04-25 06:56:55,422",
            "thread_id": "6220",
            "caller": "0x04fe0626",
            "parentcaller": "0x05076bc1",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "KERNEL32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              },
              {
                "name": "FunctionName",
                "value": "SetThreadExecutionState"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x76ac96c0"
              }
            ],
            "repeated": 0,
            "id": 3693
          },
          {
            "timestamp": "2026-04-25 06:56:55,422",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076bc7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 3694
          },
          {
            "timestamp": "2026-04-25 06:56:55,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3695
          },
          {
            "timestamp": "2026-04-25 06:56:55,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3696
          },
          {
            "timestamp": "2026-04-25 06:56:55,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3697
          },
          {
            "timestamp": "2026-04-25 06:56:55,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3698
          },
          {
            "timestamp": "2026-04-25 06:56:55,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3699
          },
          {
            "timestamp": "2026-04-25 06:56:55,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3700
          },
          {
            "timestamp": "2026-04-25 06:56:55,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3701
          },
          {
            "timestamp": "2026-04-25 06:56:55,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3702
          },
          {
            "timestamp": "2026-04-25 06:56:55,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3703
          },
          {
            "timestamp": "2026-04-25 06:56:55,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3704
          },
          {
            "timestamp": "2026-04-25 06:56:55,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3705
          },
          {
            "timestamp": "2026-04-25 06:56:55,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3706
          },
          {
            "timestamp": "2026-04-25 06:56:55,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3707
          },
          {
            "timestamp": "2026-04-25 06:56:55,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3708
          },
          {
            "timestamp": "2026-04-25 06:56:55,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3709
          },
          {
            "timestamp": "2026-04-25 06:56:55,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3710
          },
          {
            "timestamp": "2026-04-25 06:56:55,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3711
          },
          {
            "timestamp": "2026-04-25 06:56:55,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3712
          },
          {
            "timestamp": "2026-04-25 06:56:55,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3713
          },
          {
            "timestamp": "2026-04-25 06:56:55,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3714
          },
          {
            "timestamp": "2026-04-25 06:56:55,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3715
          },
          {
            "timestamp": "2026-04-25 06:56:55,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3716
          },
          {
            "timestamp": "2026-04-25 06:56:55,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3717
          },
          {
            "timestamp": "2026-04-25 06:56:55,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3718
          },
          {
            "timestamp": "2026-04-25 06:56:55,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3719
          },
          {
            "timestamp": "2026-04-25 06:56:55,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 3720
          },
          {
            "timestamp": "2026-04-25 06:56:55,985",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3721
          },
          {
            "timestamp": "2026-04-25 06:56:55,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3722
          },
          {
            "timestamp": "2026-04-25 06:56:55,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3723
          },
          {
            "timestamp": "2026-04-25 06:56:55,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3724
          },
          {
            "timestamp": "2026-04-25 06:56:55,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3725
          },
          {
            "timestamp": "2026-04-25 06:56:56,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3726
          },
          {
            "timestamp": "2026-04-25 06:56:56,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3727
          },
          {
            "timestamp": "2026-04-25 06:56:56,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3728
          },
          {
            "timestamp": "2026-04-25 06:56:56,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3729
          },
          {
            "timestamp": "2026-04-25 06:56:56,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3730
          },
          {
            "timestamp": "2026-04-25 06:56:56,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3731
          },
          {
            "timestamp": "2026-04-25 06:56:56,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3732
          },
          {
            "timestamp": "2026-04-25 06:56:56,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3733
          },
          {
            "timestamp": "2026-04-25 06:56:56,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3734
          },
          {
            "timestamp": "2026-04-25 06:56:56,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3735
          },
          {
            "timestamp": "2026-04-25 06:56:56,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3736
          },
          {
            "timestamp": "2026-04-25 06:56:56,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3737
          },
          {
            "timestamp": "2026-04-25 06:56:56,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3738
          },
          {
            "timestamp": "2026-04-25 06:56:56,391",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3739
          },
          {
            "timestamp": "2026-04-25 06:56:56,391",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3740
          },
          {
            "timestamp": "2026-04-25 06:56:56,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3741
          },
          {
            "timestamp": "2026-04-25 06:56:56,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3742
          },
          {
            "timestamp": "2026-04-25 06:56:56,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3743
          },
          {
            "timestamp": "2026-04-25 06:56:56,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3744
          },
          {
            "timestamp": "2026-04-25 06:56:56,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3745
          },
          {
            "timestamp": "2026-04-25 06:56:56,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3746
          },
          {
            "timestamp": "2026-04-25 06:56:56,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3747
          },
          {
            "timestamp": "2026-04-25 06:56:56,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3748
          },
          {
            "timestamp": "2026-04-25 06:56:56,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3749
          },
          {
            "timestamp": "2026-04-25 06:56:56,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3750
          },
          {
            "timestamp": "2026-04-25 06:56:56,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3751
          },
          {
            "timestamp": "2026-04-25 06:56:56,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3752
          },
          {
            "timestamp": "2026-04-25 06:56:56,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3753
          },
          {
            "timestamp": "2026-04-25 06:56:56,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3754
          },
          {
            "timestamp": "2026-04-25 06:56:56,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3755
          },
          {
            "timestamp": "2026-04-25 06:56:56,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 3756
          },
          {
            "timestamp": "2026-04-25 06:56:56,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3757
          },
          {
            "timestamp": "2026-04-25 06:56:56,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3758
          },
          {
            "timestamp": "2026-04-25 06:56:56,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3759
          },
          {
            "timestamp": "2026-04-25 06:56:56,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3760
          },
          {
            "timestamp": "2026-04-25 06:56:56,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3761
          },
          {
            "timestamp": "2026-04-25 06:56:56,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3762
          },
          {
            "timestamp": "2026-04-25 06:56:56,907",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3763
          },
          {
            "timestamp": "2026-04-25 06:56:56,907",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3764
          },
          {
            "timestamp": "2026-04-25 06:56:56,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3765
          },
          {
            "timestamp": "2026-04-25 06:56:56,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3766
          },
          {
            "timestamp": "2026-04-25 06:56:56,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 3767
          },
          {
            "timestamp": "2026-04-25 06:56:57,016",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3768
          },
          {
            "timestamp": "2026-04-25 06:56:57,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3769
          },
          {
            "timestamp": "2026-04-25 06:56:57,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3770
          },
          {
            "timestamp": "2026-04-25 06:56:57,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3771
          },
          {
            "timestamp": "2026-04-25 06:56:57,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3772
          },
          {
            "timestamp": "2026-04-25 06:56:57,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3773
          },
          {
            "timestamp": "2026-04-25 06:56:57,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3774
          },
          {
            "timestamp": "2026-04-25 06:56:57,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3775
          },
          {
            "timestamp": "2026-04-25 06:56:57,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3776
          },
          {
            "timestamp": "2026-04-25 06:56:57,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3777
          },
          {
            "timestamp": "2026-04-25 06:56:57,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3778
          },
          {
            "timestamp": "2026-04-25 06:56:57,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3779
          },
          {
            "timestamp": "2026-04-25 06:56:57,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3780
          },
          {
            "timestamp": "2026-04-25 06:56:57,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3781
          },
          {
            "timestamp": "2026-04-25 06:56:57,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3782
          },
          {
            "timestamp": "2026-04-25 06:56:57,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3783
          },
          {
            "timestamp": "2026-04-25 06:56:57,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3784
          },
          {
            "timestamp": "2026-04-25 06:56:57,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3785
          },
          {
            "timestamp": "2026-04-25 06:56:57,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3786
          },
          {
            "timestamp": "2026-04-25 06:56:57,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3787
          },
          {
            "timestamp": "2026-04-25 06:56:57,422",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3788
          },
          {
            "timestamp": "2026-04-25 06:56:57,422",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3789
          },
          {
            "timestamp": "2026-04-25 06:56:57,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3790
          },
          {
            "timestamp": "2026-04-25 06:56:57,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3791
          },
          {
            "timestamp": "2026-04-25 06:56:57,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3792
          },
          {
            "timestamp": "2026-04-25 06:56:57,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3793
          },
          {
            "timestamp": "2026-04-25 06:56:57,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3794
          },
          {
            "timestamp": "2026-04-25 06:56:57,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3795
          },
          {
            "timestamp": "2026-04-25 06:56:57,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3796
          },
          {
            "timestamp": "2026-04-25 06:56:57,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3797
          },
          {
            "timestamp": "2026-04-25 06:56:57,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3798
          },
          {
            "timestamp": "2026-04-25 06:56:57,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3799
          },
          {
            "timestamp": "2026-04-25 06:56:57,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3800
          },
          {
            "timestamp": "2026-04-25 06:56:57,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3801
          },
          {
            "timestamp": "2026-04-25 06:56:57,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3802
          },
          {
            "timestamp": "2026-04-25 06:56:57,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3803
          },
          {
            "timestamp": "2026-04-25 06:56:57,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3804
          },
          {
            "timestamp": "2026-04-25 06:56:57,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3805
          },
          {
            "timestamp": "2026-04-25 06:56:57,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3806
          },
          {
            "timestamp": "2026-04-25 06:56:57,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3807
          },
          {
            "timestamp": "2026-04-25 06:56:57,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3808
          },
          {
            "timestamp": "2026-04-25 06:56:57,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3809
          },
          {
            "timestamp": "2026-04-25 06:56:57,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3810
          },
          {
            "timestamp": "2026-04-25 06:56:57,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3811
          },
          {
            "timestamp": "2026-04-25 06:56:57,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3812
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 3813
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06602000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3814
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 3815
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 3816
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000005c4",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1476"
              }
            ],
            "repeated": 0,
            "id": 3817
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1476"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 3818
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1476"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 3819
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000005c4"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 3820
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1476"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 3821
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 3822
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3823
          },
          {
            "timestamp": "2026-04-25 06:56:57,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3824
          },
          {
            "timestamp": "2026-04-25 06:56:57,938",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3825
          },
          {
            "timestamp": "2026-04-25 06:56:57,938",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3826
          },
          {
            "timestamp": "2026-04-25 06:56:57,954",
            "thread_id": "3116",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1476"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 3827
          },
          {
            "timestamp": "2026-04-25 06:56:57,954",
            "thread_id": "3116",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 3828
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 3829
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 3830
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 3831
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05662000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3832
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 3833
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "3116",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1476"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 3834
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "3116",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1476"
              }
            ],
            "repeated": 0,
            "id": 3835
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3836
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3837
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 3838
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3839
          },
          {
            "timestamp": "2026-04-25 06:56:57,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3840
          },
          {
            "timestamp": "2026-04-25 06:56:58,001",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 3841
          },
          {
            "timestamp": "2026-04-25 06:56:58,001",
            "thread_id": "3116",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1476"
              }
            ],
            "repeated": 0,
            "id": 3842
          },
          {
            "timestamp": "2026-04-25 06:56:58,032",
            "thread_id": "3116",
            "caller": "0x0836fc8f",
            "parentcaller": "0x0836faab",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x03fcb000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000040",
                "pretty_value": "PAGE_EXECUTE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 3843
          },
          {
            "timestamp": "2026-04-25 06:56:58,032",
            "thread_id": "3116",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 3844
          },
          {
            "timestamp": "2026-04-25 06:56:58,032",
            "thread_id": "3116",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 3845
          },
          {
            "timestamp": "2026-04-25 06:56:58,032",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 3846
          },
          {
            "timestamp": "2026-04-25 06:56:58,032",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 3847
          },
          {
            "timestamp": "2026-04-25 06:56:58,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 3848
          },
          {
            "timestamp": "2026-04-25 06:56:58,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3849
          },
          {
            "timestamp": "2026-04-25 06:56:58,063",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3850
          },
          {
            "timestamp": "2026-04-25 06:56:58,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3851
          },
          {
            "timestamp": "2026-04-25 06:56:58,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3852
          },
          {
            "timestamp": "2026-04-25 06:56:58,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3853
          },
          {
            "timestamp": "2026-04-25 06:56:58,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3854
          },
          {
            "timestamp": "2026-04-25 06:56:58,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3855
          },
          {
            "timestamp": "2026-04-25 06:56:58,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3856
          },
          {
            "timestamp": "2026-04-25 06:56:58,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3857
          },
          {
            "timestamp": "2026-04-25 06:56:58,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3858
          },
          {
            "timestamp": "2026-04-25 06:56:58,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3859
          },
          {
            "timestamp": "2026-04-25 06:56:58,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3860
          },
          {
            "timestamp": "2026-04-25 06:56:58,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3861
          },
          {
            "timestamp": "2026-04-25 06:56:58,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3862
          },
          {
            "timestamp": "2026-04-25 06:56:58,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3863
          },
          {
            "timestamp": "2026-04-25 06:56:58,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3864
          },
          {
            "timestamp": "2026-04-25 06:56:58,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3865
          },
          {
            "timestamp": "2026-04-25 06:56:58,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3866
          },
          {
            "timestamp": "2026-04-25 06:56:58,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3867
          },
          {
            "timestamp": "2026-04-25 06:56:58,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3868
          },
          {
            "timestamp": "2026-04-25 06:56:58,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3869
          },
          {
            "timestamp": "2026-04-25 06:56:58,454",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3870
          },
          {
            "timestamp": "2026-04-25 06:56:58,454",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3871
          },
          {
            "timestamp": "2026-04-25 06:56:58,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3872
          },
          {
            "timestamp": "2026-04-25 06:56:58,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3873
          },
          {
            "timestamp": "2026-04-25 06:56:58,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3874
          },
          {
            "timestamp": "2026-04-25 06:56:58,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3875
          },
          {
            "timestamp": "2026-04-25 06:56:58,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3876
          },
          {
            "timestamp": "2026-04-25 06:56:58,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3877
          },
          {
            "timestamp": "2026-04-25 06:56:58,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3878
          },
          {
            "timestamp": "2026-04-25 06:56:58,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3879
          },
          {
            "timestamp": "2026-04-25 06:56:58,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3880
          },
          {
            "timestamp": "2026-04-25 06:56:58,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3881
          },
          {
            "timestamp": "2026-04-25 06:56:58,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3882
          },
          {
            "timestamp": "2026-04-25 06:56:58,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3883
          },
          {
            "timestamp": "2026-04-25 06:56:58,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3884
          },
          {
            "timestamp": "2026-04-25 06:56:58,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3885
          },
          {
            "timestamp": "2026-04-25 06:56:58,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3886
          },
          {
            "timestamp": "2026-04-25 06:56:58,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3887
          },
          {
            "timestamp": "2026-04-25 06:56:58,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3888
          },
          {
            "timestamp": "2026-04-25 06:56:58,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3889
          },
          {
            "timestamp": "2026-04-25 06:56:58,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3890
          },
          {
            "timestamp": "2026-04-25 06:56:58,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3891
          },
          {
            "timestamp": "2026-04-25 06:56:59,001",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3892
          },
          {
            "timestamp": "2026-04-25 06:56:59,001",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3893
          },
          {
            "timestamp": "2026-04-25 06:56:59,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3894
          },
          {
            "timestamp": "2026-04-25 06:56:59,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3895
          },
          {
            "timestamp": "2026-04-25 06:56:59,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3896
          },
          {
            "timestamp": "2026-04-25 06:56:59,063",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3897
          },
          {
            "timestamp": "2026-04-25 06:56:59,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3898
          },
          {
            "timestamp": "2026-04-25 06:56:59,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3899
          },
          {
            "timestamp": "2026-04-25 06:56:59,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3900
          },
          {
            "timestamp": "2026-04-25 06:56:59,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3901
          },
          {
            "timestamp": "2026-04-25 06:56:59,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3902
          },
          {
            "timestamp": "2026-04-25 06:56:59,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3903
          },
          {
            "timestamp": "2026-04-25 06:56:59,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3904
          },
          {
            "timestamp": "2026-04-25 06:56:59,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3905
          },
          {
            "timestamp": "2026-04-25 06:56:59,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3906
          },
          {
            "timestamp": "2026-04-25 06:56:59,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3907
          },
          {
            "timestamp": "2026-04-25 06:56:59,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3908
          },
          {
            "timestamp": "2026-04-25 06:56:59,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3909
          },
          {
            "timestamp": "2026-04-25 06:56:59,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3910
          },
          {
            "timestamp": "2026-04-25 06:56:59,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3911
          },
          {
            "timestamp": "2026-04-25 06:56:59,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3912
          },
          {
            "timestamp": "2026-04-25 06:56:59,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3913
          },
          {
            "timestamp": "2026-04-25 06:56:59,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3914
          },
          {
            "timestamp": "2026-04-25 06:56:59,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3915
          },
          {
            "timestamp": "2026-04-25 06:56:59,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3916
          },
          {
            "timestamp": "2026-04-25 06:56:59,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3917
          },
          {
            "timestamp": "2026-04-25 06:56:59,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3918
          },
          {
            "timestamp": "2026-04-25 06:56:59,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3919
          },
          {
            "timestamp": "2026-04-25 06:56:59,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3920
          },
          {
            "timestamp": "2026-04-25 06:56:59,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3921
          },
          {
            "timestamp": "2026-04-25 06:56:59,501",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3922
          },
          {
            "timestamp": "2026-04-25 06:56:59,501",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3923
          },
          {
            "timestamp": "2026-04-25 06:56:59,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3924
          },
          {
            "timestamp": "2026-04-25 06:56:59,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3925
          },
          {
            "timestamp": "2026-04-25 06:56:59,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3926
          },
          {
            "timestamp": "2026-04-25 06:56:59,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3927
          },
          {
            "timestamp": "2026-04-25 06:56:59,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3928
          },
          {
            "timestamp": "2026-04-25 06:56:59,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3929
          },
          {
            "timestamp": "2026-04-25 06:56:59,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3930
          },
          {
            "timestamp": "2026-04-25 06:56:59,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3931
          },
          {
            "timestamp": "2026-04-25 06:56:59,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3932
          },
          {
            "timestamp": "2026-04-25 06:56:59,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3933
          },
          {
            "timestamp": "2026-04-25 06:56:59,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3934
          },
          {
            "timestamp": "2026-04-25 06:56:59,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3935
          },
          {
            "timestamp": "2026-04-25 06:56:59,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3936
          },
          {
            "timestamp": "2026-04-25 06:56:59,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3937
          },
          {
            "timestamp": "2026-04-25 06:56:59,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3938
          },
          {
            "timestamp": "2026-04-25 06:56:59,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3939
          },
          {
            "timestamp": "2026-04-25 06:56:59,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3940
          },
          {
            "timestamp": "2026-04-25 06:56:59,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3941
          },
          {
            "timestamp": "2026-04-25 06:56:59,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3942
          },
          {
            "timestamp": "2026-04-25 06:57:00,063",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3943
          },
          {
            "timestamp": "2026-04-25 06:57:00,063",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3944
          },
          {
            "timestamp": "2026-04-25 06:57:00,063",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3945
          },
          {
            "timestamp": "2026-04-25 06:57:00,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3946
          },
          {
            "timestamp": "2026-04-25 06:57:00,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3947
          },
          {
            "timestamp": "2026-04-25 06:57:00,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3948
          },
          {
            "timestamp": "2026-04-25 06:57:00,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3949
          },
          {
            "timestamp": "2026-04-25 06:57:00,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3950
          },
          {
            "timestamp": "2026-04-25 06:57:00,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3951
          },
          {
            "timestamp": "2026-04-25 06:57:00,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3952
          },
          {
            "timestamp": "2026-04-25 06:57:00,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3953
          },
          {
            "timestamp": "2026-04-25 06:57:00,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3954
          },
          {
            "timestamp": "2026-04-25 06:57:00,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3955
          },
          {
            "timestamp": "2026-04-25 06:57:00,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3956
          },
          {
            "timestamp": "2026-04-25 06:57:00,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3957
          },
          {
            "timestamp": "2026-04-25 06:57:00,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3958
          },
          {
            "timestamp": "2026-04-25 06:57:00,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3959
          },
          {
            "timestamp": "2026-04-25 06:57:00,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3960
          },
          {
            "timestamp": "2026-04-25 06:57:00,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3961
          },
          {
            "timestamp": "2026-04-25 06:57:00,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3962
          },
          {
            "timestamp": "2026-04-25 06:57:00,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3963
          },
          {
            "timestamp": "2026-04-25 06:57:00,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3964
          },
          {
            "timestamp": "2026-04-25 06:57:00,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3965
          },
          {
            "timestamp": "2026-04-25 06:57:00,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3966
          },
          {
            "timestamp": "2026-04-25 06:57:00,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3967
          },
          {
            "timestamp": "2026-04-25 06:57:00,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3968
          },
          {
            "timestamp": "2026-04-25 06:57:00,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3969
          },
          {
            "timestamp": "2026-04-25 06:57:00,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3970
          },
          {
            "timestamp": "2026-04-25 06:57:00,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3971
          },
          {
            "timestamp": "2026-04-25 06:57:00,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3972
          },
          {
            "timestamp": "2026-04-25 06:57:00,563",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3973
          },
          {
            "timestamp": "2026-04-25 06:57:00,563",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3974
          },
          {
            "timestamp": "2026-04-25 06:57:00,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3975
          },
          {
            "timestamp": "2026-04-25 06:57:00,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3976
          },
          {
            "timestamp": "2026-04-25 06:57:00,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3977
          },
          {
            "timestamp": "2026-04-25 06:57:00,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3978
          },
          {
            "timestamp": "2026-04-25 06:57:00,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3979
          },
          {
            "timestamp": "2026-04-25 06:57:00,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3980
          },
          {
            "timestamp": "2026-04-25 06:57:00,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3981
          },
          {
            "timestamp": "2026-04-25 06:57:00,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 3982
          },
          {
            "timestamp": "2026-04-25 06:57:00,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3983
          },
          {
            "timestamp": "2026-04-25 06:57:00,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3984
          },
          {
            "timestamp": "2026-04-25 06:57:00,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3985
          },
          {
            "timestamp": "2026-04-25 06:57:00,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3986
          },
          {
            "timestamp": "2026-04-25 06:57:00,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3987
          },
          {
            "timestamp": "2026-04-25 06:57:00,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3988
          },
          {
            "timestamp": "2026-04-25 06:57:00,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3989
          },
          {
            "timestamp": "2026-04-25 06:57:00,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3990
          },
          {
            "timestamp": "2026-04-25 06:57:01,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 3991
          },
          {
            "timestamp": "2026-04-25 06:57:01,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3992
          },
          {
            "timestamp": "2026-04-25 06:57:01,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 3993
          },
          {
            "timestamp": "2026-04-25 06:57:01,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 3994
          },
          {
            "timestamp": "2026-04-25 06:57:01,079",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 3995
          },
          {
            "timestamp": "2026-04-25 06:57:01,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 3996
          },
          {
            "timestamp": "2026-04-25 06:57:01,079",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 3997
          },
          {
            "timestamp": "2026-04-25 06:57:01,079",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 3998
          },
          {
            "timestamp": "2026-04-25 06:57:01,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 3999
          },
          {
            "timestamp": "2026-04-25 06:57:01,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4000
          },
          {
            "timestamp": "2026-04-25 06:57:01,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4001
          },
          {
            "timestamp": "2026-04-25 06:57:01,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4002
          },
          {
            "timestamp": "2026-04-25 06:57:01,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4003
          },
          {
            "timestamp": "2026-04-25 06:57:01,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4004
          },
          {
            "timestamp": "2026-04-25 06:57:01,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4005
          },
          {
            "timestamp": "2026-04-25 06:57:01,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4006
          },
          {
            "timestamp": "2026-04-25 06:57:01,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4007
          },
          {
            "timestamp": "2026-04-25 06:57:01,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4008
          },
          {
            "timestamp": "2026-04-25 06:57:01,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4009
          },
          {
            "timestamp": "2026-04-25 06:57:01,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4010
          },
          {
            "timestamp": "2026-04-25 06:57:01,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4011
          },
          {
            "timestamp": "2026-04-25 06:57:01,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4012
          },
          {
            "timestamp": "2026-04-25 06:57:01,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4013
          },
          {
            "timestamp": "2026-04-25 06:57:01,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4014
          },
          {
            "timestamp": "2026-04-25 06:57:01,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4015
          },
          {
            "timestamp": "2026-04-25 06:57:01,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4016
          },
          {
            "timestamp": "2026-04-25 06:57:01,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4017
          },
          {
            "timestamp": "2026-04-25 06:57:01,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4018
          },
          {
            "timestamp": "2026-04-25 06:57:01,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4019
          },
          {
            "timestamp": "2026-04-25 06:57:01,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4020
          },
          {
            "timestamp": "2026-04-25 06:57:01,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4021
          },
          {
            "timestamp": "2026-04-25 06:57:01,579",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4022
          },
          {
            "timestamp": "2026-04-25 06:57:01,579",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4023
          },
          {
            "timestamp": "2026-04-25 06:57:01,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4024
          },
          {
            "timestamp": "2026-04-25 06:57:01,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4025
          },
          {
            "timestamp": "2026-04-25 06:57:01,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4026
          },
          {
            "timestamp": "2026-04-25 06:57:01,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4027
          },
          {
            "timestamp": "2026-04-25 06:57:01,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4028
          },
          {
            "timestamp": "2026-04-25 06:57:01,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4029
          },
          {
            "timestamp": "2026-04-25 06:57:01,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4030
          },
          {
            "timestamp": "2026-04-25 06:57:01,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4031
          },
          {
            "timestamp": "2026-04-25 06:57:01,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4032
          },
          {
            "timestamp": "2026-04-25 06:57:01,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4033
          },
          {
            "timestamp": "2026-04-25 06:57:01,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4034
          },
          {
            "timestamp": "2026-04-25 06:57:01,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4035
          },
          {
            "timestamp": "2026-04-25 06:57:01,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4036
          },
          {
            "timestamp": "2026-04-25 06:57:01,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4037
          },
          {
            "timestamp": "2026-04-25 06:57:01,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4038
          },
          {
            "timestamp": "2026-04-25 06:57:01,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4039
          },
          {
            "timestamp": "2026-04-25 06:57:02,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4040
          },
          {
            "timestamp": "2026-04-25 06:57:02,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4041
          },
          {
            "timestamp": "2026-04-25 06:57:02,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4042
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4043
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06622000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4044
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4045
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4046
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000005d8",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1496"
              }
            ],
            "repeated": 0,
            "id": 4047
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1496"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 4048
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1496"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 4049
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000005d8"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 4050
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1496"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 4051
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 4052
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4053
          },
          {
            "timestamp": "2026-04-25 06:57:02,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4054
          },
          {
            "timestamp": "2026-04-25 06:57:02,063",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 4055
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4056
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4057
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4058
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4059
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4060
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000005ec"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2728"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "2660"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 4061
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000005ec",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2728"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "2660"
              }
            ],
            "repeated": 0,
            "id": 4062
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000005ec"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "2660"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 4063
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1496"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4064
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "2660",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02844000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4065
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4066
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "2660",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 1,
            "id": 4067
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e81d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4068
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "2660",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 4069
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x0507593a",
            "parentcaller": "0x0836e81d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4070
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "2660",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 4071
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "2660",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00b11000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4072
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x050759c3",
            "parentcaller": "0x0836e81d",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4073
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 4074
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 4075
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4076
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4077
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1496"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 4078
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "2660",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05672000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4079
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "2660",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000005ec"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xf0s\\x00T\\x19\\x00\\x00d\n\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "2660"
              }
            ],
            "repeated": 0,
            "id": 4080
          },
          {
            "timestamp": "2026-04-25 06:57:02,079",
            "thread_id": "3116",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1496"
              }
            ],
            "repeated": 0,
            "id": 4081
          },
          {
            "timestamp": "2026-04-25 06:57:02,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4082
          },
          {
            "timestamp": "2026-04-25 06:57:02,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4083
          },
          {
            "timestamp": "2026-04-25 06:57:02,094",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4084
          },
          {
            "timestamp": "2026-04-25 06:57:02,094",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4085
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 4086
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "3116",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1496"
              }
            ],
            "repeated": 0,
            "id": 4087
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "3116",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 4088
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "3116",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 4089
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 4090
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 4091
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 4092
          },
          {
            "timestamp": "2026-04-25 06:57:02,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4093
          },
          {
            "timestamp": "2026-04-25 06:57:02,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4094
          },
          {
            "timestamp": "2026-04-25 06:57:02,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4095
          },
          {
            "timestamp": "2026-04-25 06:57:02,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4096
          },
          {
            "timestamp": "2026-04-25 06:57:02,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4097
          },
          {
            "timestamp": "2026-04-25 06:57:02,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4098
          },
          {
            "timestamp": "2026-04-25 06:57:02,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4099
          },
          {
            "timestamp": "2026-04-25 06:57:02,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4100
          },
          {
            "timestamp": "2026-04-25 06:57:02,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4101
          },
          {
            "timestamp": "2026-04-25 06:57:02,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4102
          },
          {
            "timestamp": "2026-04-25 06:57:02,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4103
          },
          {
            "timestamp": "2026-04-25 06:57:02,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4104
          },
          {
            "timestamp": "2026-04-25 06:57:02,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4105
          },
          {
            "timestamp": "2026-04-25 06:57:02,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4106
          },
          {
            "timestamp": "2026-04-25 06:57:02,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4107
          },
          {
            "timestamp": "2026-04-25 06:57:02,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4108
          },
          {
            "timestamp": "2026-04-25 06:57:02,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4109
          },
          {
            "timestamp": "2026-04-25 06:57:02,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4110
          },
          {
            "timestamp": "2026-04-25 06:57:02,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4111
          },
          {
            "timestamp": "2026-04-25 06:57:02,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4112
          },
          {
            "timestamp": "2026-04-25 06:57:02,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4113
          },
          {
            "timestamp": "2026-04-25 06:57:02,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4114
          },
          {
            "timestamp": "2026-04-25 06:57:02,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4115
          },
          {
            "timestamp": "2026-04-25 06:57:02,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4116
          },
          {
            "timestamp": "2026-04-25 06:57:02,610",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4117
          },
          {
            "timestamp": "2026-04-25 06:57:02,610",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4118
          },
          {
            "timestamp": "2026-04-25 06:57:02,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4119
          },
          {
            "timestamp": "2026-04-25 06:57:02,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4120
          },
          {
            "timestamp": "2026-04-25 06:57:02,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4121
          },
          {
            "timestamp": "2026-04-25 06:57:02,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4122
          },
          {
            "timestamp": "2026-04-25 06:57:02,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4123
          },
          {
            "timestamp": "2026-04-25 06:57:02,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4124
          },
          {
            "timestamp": "2026-04-25 06:57:02,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4125
          },
          {
            "timestamp": "2026-04-25 06:57:02,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4126
          },
          {
            "timestamp": "2026-04-25 06:57:02,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4127
          },
          {
            "timestamp": "2026-04-25 06:57:02,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4128
          },
          {
            "timestamp": "2026-04-25 06:57:02,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4129
          },
          {
            "timestamp": "2026-04-25 06:57:02,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4130
          },
          {
            "timestamp": "2026-04-25 06:57:02,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4131
          },
          {
            "timestamp": "2026-04-25 06:57:02,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4132
          },
          {
            "timestamp": "2026-04-25 06:57:02,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4133
          },
          {
            "timestamp": "2026-04-25 06:57:02,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4134
          },
          {
            "timestamp": "2026-04-25 06:57:02,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4135
          },
          {
            "timestamp": "2026-04-25 06:57:03,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4136
          },
          {
            "timestamp": "2026-04-25 06:57:03,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4137
          },
          {
            "timestamp": "2026-04-25 06:57:03,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4138
          },
          {
            "timestamp": "2026-04-25 06:57:03,079",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4139
          },
          {
            "timestamp": "2026-04-25 06:57:03,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4140
          },
          {
            "timestamp": "2026-04-25 06:57:03,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4141
          },
          {
            "timestamp": "2026-04-25 06:57:03,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4142
          },
          {
            "timestamp": "2026-04-25 06:57:03,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4143
          },
          {
            "timestamp": "2026-04-25 06:57:03,126",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4144
          },
          {
            "timestamp": "2026-04-25 06:57:03,126",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4145
          },
          {
            "timestamp": "2026-04-25 06:57:03,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4146
          },
          {
            "timestamp": "2026-04-25 06:57:03,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4147
          },
          {
            "timestamp": "2026-04-25 06:57:03,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4148
          },
          {
            "timestamp": "2026-04-25 06:57:03,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4149
          },
          {
            "timestamp": "2026-04-25 06:57:03,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4150
          },
          {
            "timestamp": "2026-04-25 06:57:03,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4151
          },
          {
            "timestamp": "2026-04-25 06:57:03,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4152
          },
          {
            "timestamp": "2026-04-25 06:57:03,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4153
          },
          {
            "timestamp": "2026-04-25 06:57:03,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4154
          },
          {
            "timestamp": "2026-04-25 06:57:03,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4155
          },
          {
            "timestamp": "2026-04-25 06:57:03,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4156
          },
          {
            "timestamp": "2026-04-25 06:57:03,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4157
          },
          {
            "timestamp": "2026-04-25 06:57:03,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4158
          },
          {
            "timestamp": "2026-04-25 06:57:03,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4159
          },
          {
            "timestamp": "2026-04-25 06:57:03,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4160
          },
          {
            "timestamp": "2026-04-25 06:57:03,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4161
          },
          {
            "timestamp": "2026-04-25 06:57:03,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4162
          },
          {
            "timestamp": "2026-04-25 06:57:03,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4163
          },
          {
            "timestamp": "2026-04-25 06:57:03,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4164
          },
          {
            "timestamp": "2026-04-25 06:57:03,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4165
          },
          {
            "timestamp": "2026-04-25 06:57:03,641",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4166
          },
          {
            "timestamp": "2026-04-25 06:57:03,641",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4167
          },
          {
            "timestamp": "2026-04-25 06:57:03,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4168
          },
          {
            "timestamp": "2026-04-25 06:57:03,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4169
          },
          {
            "timestamp": "2026-04-25 06:57:03,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4170
          },
          {
            "timestamp": "2026-04-25 06:57:03,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4171
          },
          {
            "timestamp": "2026-04-25 06:57:03,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4172
          },
          {
            "timestamp": "2026-04-25 06:57:03,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4173
          },
          {
            "timestamp": "2026-04-25 06:57:03,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4174
          },
          {
            "timestamp": "2026-04-25 06:57:03,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4175
          },
          {
            "timestamp": "2026-04-25 06:57:03,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4176
          },
          {
            "timestamp": "2026-04-25 06:57:03,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4177
          },
          {
            "timestamp": "2026-04-25 06:57:03,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4178
          },
          {
            "timestamp": "2026-04-25 06:57:03,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4179
          },
          {
            "timestamp": "2026-04-25 06:57:03,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4180
          },
          {
            "timestamp": "2026-04-25 06:57:03,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4181
          },
          {
            "timestamp": "2026-04-25 06:57:04,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4182
          },
          {
            "timestamp": "2026-04-25 06:57:04,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4183
          },
          {
            "timestamp": "2026-04-25 06:57:04,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4184
          },
          {
            "timestamp": "2026-04-25 06:57:04,079",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4185
          },
          {
            "timestamp": "2026-04-25 06:57:04,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4186
          },
          {
            "timestamp": "2026-04-25 06:57:04,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4187
          },
          {
            "timestamp": "2026-04-25 06:57:04,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4188
          },
          {
            "timestamp": "2026-04-25 06:57:04,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4189
          },
          {
            "timestamp": "2026-04-25 06:57:04,157",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4190
          },
          {
            "timestamp": "2026-04-25 06:57:04,157",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4191
          },
          {
            "timestamp": "2026-04-25 06:57:04,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4192
          },
          {
            "timestamp": "2026-04-25 06:57:04,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4193
          },
          {
            "timestamp": "2026-04-25 06:57:04,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4194
          },
          {
            "timestamp": "2026-04-25 06:57:04,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4195
          },
          {
            "timestamp": "2026-04-25 06:57:04,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4196
          },
          {
            "timestamp": "2026-04-25 06:57:04,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4197
          },
          {
            "timestamp": "2026-04-25 06:57:04,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4198
          },
          {
            "timestamp": "2026-04-25 06:57:04,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4199
          },
          {
            "timestamp": "2026-04-25 06:57:04,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4200
          },
          {
            "timestamp": "2026-04-25 06:57:04,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4201
          },
          {
            "timestamp": "2026-04-25 06:57:04,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4202
          },
          {
            "timestamp": "2026-04-25 06:57:04,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4203
          },
          {
            "timestamp": "2026-04-25 06:57:04,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4204
          },
          {
            "timestamp": "2026-04-25 06:57:04,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4205
          },
          {
            "timestamp": "2026-04-25 06:57:04,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4206
          },
          {
            "timestamp": "2026-04-25 06:57:04,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4207
          },
          {
            "timestamp": "2026-04-25 06:57:04,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4208
          },
          {
            "timestamp": "2026-04-25 06:57:04,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4209
          },
          {
            "timestamp": "2026-04-25 06:57:04,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4210
          },
          {
            "timestamp": "2026-04-25 06:57:04,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4211
          },
          {
            "timestamp": "2026-04-25 06:57:04,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4212
          },
          {
            "timestamp": "2026-04-25 06:57:04,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4213
          },
          {
            "timestamp": "2026-04-25 06:57:04,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4214
          },
          {
            "timestamp": "2026-04-25 06:57:04,672",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4215
          },
          {
            "timestamp": "2026-04-25 06:57:04,672",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4216
          },
          {
            "timestamp": "2026-04-25 06:57:04,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4217
          },
          {
            "timestamp": "2026-04-25 06:57:04,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4218
          },
          {
            "timestamp": "2026-04-25 06:57:04,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4219
          },
          {
            "timestamp": "2026-04-25 06:57:04,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4220
          },
          {
            "timestamp": "2026-04-25 06:57:04,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4221
          },
          {
            "timestamp": "2026-04-25 06:57:04,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4222
          },
          {
            "timestamp": "2026-04-25 06:57:04,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4223
          },
          {
            "timestamp": "2026-04-25 06:57:04,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4224
          },
          {
            "timestamp": "2026-04-25 06:57:04,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4225
          },
          {
            "timestamp": "2026-04-25 06:57:04,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4226
          },
          {
            "timestamp": "2026-04-25 06:57:04,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4227
          },
          {
            "timestamp": "2026-04-25 06:57:05,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4228
          },
          {
            "timestamp": "2026-04-25 06:57:05,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4229
          },
          {
            "timestamp": "2026-04-25 06:57:05,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4230
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "16"
              }
            ],
            "repeated": 0,
            "id": 4231
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0788142c",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "K32EnumProcesses",
            "status": true,
            "return": "0x00000001",
            "arguments": [],
            "repeated": 0,
            "id": 4232
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06642000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4233
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": false,
            "return": "0xffffffffc0000004",
            "pretty_return": "INFO_LENGTH_MISMATCH",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 4234
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06662000"
              },
              {
                "name": "RegionSize",
                "value": "0x00036000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4235
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 4236
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05682000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4237
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05692000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4238
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x056a2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4239
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x056b2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4240
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x0288a3a6",
            "parentcaller": "0x0507b764",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 4241
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4242
          },
          {
            "timestamp": "2026-04-25 06:57:05,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4243
          },
          {
            "timestamp": "2026-04-25 06:57:05,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "19"
              }
            ],
            "repeated": 0,
            "id": 4244
          },
          {
            "timestamp": "2026-04-25 06:57:05,094",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4245
          },
          {
            "timestamp": "2026-04-25 06:57:05,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4246
          },
          {
            "timestamp": "2026-04-25 06:57:05,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4247
          },
          {
            "timestamp": "2026-04-25 06:57:05,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4248
          },
          {
            "timestamp": "2026-04-25 06:57:05,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4249
          },
          {
            "timestamp": "2026-04-25 06:57:05,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4250
          },
          {
            "timestamp": "2026-04-25 06:57:05,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4251
          },
          {
            "timestamp": "2026-04-25 06:57:05,188",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4252
          },
          {
            "timestamp": "2026-04-25 06:57:05,188",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4253
          },
          {
            "timestamp": "2026-04-25 06:57:05,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4254
          },
          {
            "timestamp": "2026-04-25 06:57:05,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4255
          },
          {
            "timestamp": "2026-04-25 06:57:05,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4256
          },
          {
            "timestamp": "2026-04-25 06:57:05,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4257
          },
          {
            "timestamp": "2026-04-25 06:57:05,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4258
          },
          {
            "timestamp": "2026-04-25 06:57:05,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4259
          },
          {
            "timestamp": "2026-04-25 06:57:05,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4260
          },
          {
            "timestamp": "2026-04-25 06:57:05,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4261
          },
          {
            "timestamp": "2026-04-25 06:57:05,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4262
          },
          {
            "timestamp": "2026-04-25 06:57:05,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4263
          },
          {
            "timestamp": "2026-04-25 06:57:05,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4264
          },
          {
            "timestamp": "2026-04-25 06:57:05,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4265
          },
          {
            "timestamp": "2026-04-25 06:57:05,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4266
          },
          {
            "timestamp": "2026-04-25 06:57:05,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4267
          },
          {
            "timestamp": "2026-04-25 06:57:05,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4268
          },
          {
            "timestamp": "2026-04-25 06:57:05,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4269
          },
          {
            "timestamp": "2026-04-25 06:57:05,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4270
          },
          {
            "timestamp": "2026-04-25 06:57:05,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4271
          },
          {
            "timestamp": "2026-04-25 06:57:05,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4272
          },
          {
            "timestamp": "2026-04-25 06:57:05,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4273
          },
          {
            "timestamp": "2026-04-25 06:57:05,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4274
          },
          {
            "timestamp": "2026-04-25 06:57:05,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4275
          },
          {
            "timestamp": "2026-04-25 06:57:05,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4276
          },
          {
            "timestamp": "2026-04-25 06:57:05,704",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4277
          },
          {
            "timestamp": "2026-04-25 06:57:05,704",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4278
          },
          {
            "timestamp": "2026-04-25 06:57:05,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4279
          },
          {
            "timestamp": "2026-04-25 06:57:05,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4280
          },
          {
            "timestamp": "2026-04-25 06:57:05,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4281
          },
          {
            "timestamp": "2026-04-25 06:57:05,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4282
          },
          {
            "timestamp": "2026-04-25 06:57:05,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4283
          },
          {
            "timestamp": "2026-04-25 06:57:05,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4284
          },
          {
            "timestamp": "2026-04-25 06:57:05,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4285
          },
          {
            "timestamp": "2026-04-25 06:57:05,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4286
          },
          {
            "timestamp": "2026-04-25 06:57:05,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4287
          },
          {
            "timestamp": "2026-04-25 06:57:05,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4288
          },
          {
            "timestamp": "2026-04-25 06:57:05,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4289
          },
          {
            "timestamp": "2026-04-25 06:57:06,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4290
          },
          {
            "timestamp": "2026-04-25 06:57:06,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4291
          },
          {
            "timestamp": "2026-04-25 06:57:06,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4292
          },
          {
            "timestamp": "2026-04-25 06:57:06,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4293
          },
          {
            "timestamp": "2026-04-25 06:57:06,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 4294
          },
          {
            "timestamp": "2026-04-25 06:57:06,110",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4295
          },
          {
            "timestamp": "2026-04-25 06:57:06,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4296
          },
          {
            "timestamp": "2026-04-25 06:57:06,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4297
          },
          {
            "timestamp": "2026-04-25 06:57:06,126",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4298
          },
          {
            "timestamp": "2026-04-25 06:57:06,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4299
          },
          {
            "timestamp": "2026-04-25 06:57:06,126",
            "thread_id": "1416",
            "caller": "0x0507593a",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4300
          },
          {
            "timestamp": "2026-04-25 06:57:06,126",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06698000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4301
          },
          {
            "timestamp": "2026-04-25 06:57:06,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4302
          },
          {
            "timestamp": "2026-04-25 06:57:06,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4303
          },
          {
            "timestamp": "2026-04-25 06:57:06,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4304
          },
          {
            "timestamp": "2026-04-25 06:57:06,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4305
          },
          {
            "timestamp": "2026-04-25 06:57:06,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4306
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4307
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4308
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000005f8",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1528"
              }
            ],
            "repeated": 0,
            "id": 4309
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 4310
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 4311
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000005f8"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 4312
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 4313
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 4314
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4315
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4316
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4317
          },
          {
            "timestamp": "2026-04-25 06:57:06,219",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4318
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4319
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 4320
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 4321
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 4322
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4323
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4324
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1528"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 4325
          },
          {
            "timestamp": "2026-04-25 06:57:06,235",
            "thread_id": "3116",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              }
            ],
            "repeated": 0,
            "id": 4326
          },
          {
            "timestamp": "2026-04-25 06:57:06,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4327
          },
          {
            "timestamp": "2026-04-25 06:57:06,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4328
          },
          {
            "timestamp": "2026-04-25 06:57:06,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4329
          },
          {
            "timestamp": "2026-04-25 06:57:06,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4330
          },
          {
            "timestamp": "2026-04-25 06:57:06,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4331
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "2660",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 4332
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "2660",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              }
            ],
            "repeated": 0,
            "id": 4333
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "2660",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 4334
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "2660",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 4335
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "2660",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4336
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 4337
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 13,
            "id": 4338
          },
          {
            "timestamp": "2026-04-25 06:57:06,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4339
          },
          {
            "timestamp": "2026-04-25 06:57:06,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4340
          },
          {
            "timestamp": "2026-04-25 06:57:06,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4341
          },
          {
            "timestamp": "2026-04-25 06:57:06,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4342
          },
          {
            "timestamp": "2026-04-25 06:57:06,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4343
          },
          {
            "timestamp": "2026-04-25 06:57:06,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4344
          },
          {
            "timestamp": "2026-04-25 06:57:06,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4345
          },
          {
            "timestamp": "2026-04-25 06:57:06,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4346
          },
          {
            "timestamp": "2026-04-25 06:57:06,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4347
          },
          {
            "timestamp": "2026-04-25 06:57:06,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4348
          },
          {
            "timestamp": "2026-04-25 06:57:06,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4349
          },
          {
            "timestamp": "2026-04-25 06:57:06,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4350
          },
          {
            "timestamp": "2026-04-25 06:57:06,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4351
          },
          {
            "timestamp": "2026-04-25 06:57:06,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4352
          },
          {
            "timestamp": "2026-04-25 06:57:06,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4353
          },
          {
            "timestamp": "2026-04-25 06:57:06,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4354
          },
          {
            "timestamp": "2026-04-25 06:57:06,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4355
          },
          {
            "timestamp": "2026-04-25 06:57:06,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4356
          },
          {
            "timestamp": "2026-04-25 06:57:06,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4357
          },
          {
            "timestamp": "2026-04-25 06:57:06,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4358
          },
          {
            "timestamp": "2026-04-25 06:57:06,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4359
          },
          {
            "timestamp": "2026-04-25 06:57:06,719",
            "thread_id": "4596",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 4360
          },
          {
            "timestamp": "2026-04-25 06:57:06,719",
            "thread_id": "4596",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4361
          },
          {
            "timestamp": "2026-04-25 06:57:06,719",
            "thread_id": "4596",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 4362
          },
          {
            "timestamp": "2026-04-25 06:57:06,719",
            "thread_id": "4596",
            "caller": "0x77271454",
            "parentcaller": "0x7693b5fa",
            "category": "system",
            "api": "NtDuplicateObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SourceProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "SourceHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "TargetProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "TargetHandle",
                "value": "0x00000608"
              },
              {
                "name": "Options",
                "value": "0x00000002"
              }
            ],
            "repeated": 0,
            "id": 4363
          },
          {
            "timestamp": "2026-04-25 06:57:06,719",
            "thread_id": "2784",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 4364
          },
          {
            "timestamp": "2026-04-25 06:57:06,719",
            "thread_id": "2784",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4365
          },
          {
            "timestamp": "2026-04-25 06:57:06,719",
            "thread_id": "2784",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 4366
          },
          {
            "timestamp": "2026-04-25 06:57:06,735",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4367
          },
          {
            "timestamp": "2026-04-25 06:57:06,735",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4368
          },
          {
            "timestamp": "2026-04-25 06:57:06,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4369
          },
          {
            "timestamp": "2026-04-25 06:57:06,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4370
          },
          {
            "timestamp": "2026-04-25 06:57:06,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4371
          },
          {
            "timestamp": "2026-04-25 06:57:06,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4372
          },
          {
            "timestamp": "2026-04-25 06:57:06,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4373
          },
          {
            "timestamp": "2026-04-25 06:57:06,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4374
          },
          {
            "timestamp": "2026-04-25 06:57:06,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4375
          },
          {
            "timestamp": "2026-04-25 06:57:06,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4376
          },
          {
            "timestamp": "2026-04-25 06:57:06,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4377
          },
          {
            "timestamp": "2026-04-25 06:57:06,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4378
          },
          {
            "timestamp": "2026-04-25 06:57:06,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4379
          },
          {
            "timestamp": "2026-04-25 06:57:07,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4380
          },
          {
            "timestamp": "2026-04-25 06:57:07,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4381
          },
          {
            "timestamp": "2026-04-25 06:57:07,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4382
          },
          {
            "timestamp": "2026-04-25 06:57:07,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4383
          },
          {
            "timestamp": "2026-04-25 06:57:07,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4384
          },
          {
            "timestamp": "2026-04-25 06:57:07,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 4385
          },
          {
            "timestamp": "2026-04-25 06:57:07,126",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4386
          },
          {
            "timestamp": "2026-04-25 06:57:07,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4387
          },
          {
            "timestamp": "2026-04-25 06:57:07,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4388
          },
          {
            "timestamp": "2026-04-25 06:57:07,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4389
          },
          {
            "timestamp": "2026-04-25 06:57:07,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4390
          },
          {
            "timestamp": "2026-04-25 06:57:07,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4391
          },
          {
            "timestamp": "2026-04-25 06:57:07,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4392
          },
          {
            "timestamp": "2026-04-25 06:57:07,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4393
          },
          {
            "timestamp": "2026-04-25 06:57:07,251",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4394
          },
          {
            "timestamp": "2026-04-25 06:57:07,251",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4395
          },
          {
            "timestamp": "2026-04-25 06:57:07,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4396
          },
          {
            "timestamp": "2026-04-25 06:57:07,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4397
          },
          {
            "timestamp": "2026-04-25 06:57:07,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4398
          },
          {
            "timestamp": "2026-04-25 06:57:07,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4399
          },
          {
            "timestamp": "2026-04-25 06:57:07,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4400
          },
          {
            "timestamp": "2026-04-25 06:57:07,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4401
          },
          {
            "timestamp": "2026-04-25 06:57:07,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4402
          },
          {
            "timestamp": "2026-04-25 06:57:07,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4403
          },
          {
            "timestamp": "2026-04-25 06:57:07,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4404
          },
          {
            "timestamp": "2026-04-25 06:57:07,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4405
          },
          {
            "timestamp": "2026-04-25 06:57:07,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4406
          },
          {
            "timestamp": "2026-04-25 06:57:07,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4407
          },
          {
            "timestamp": "2026-04-25 06:57:07,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4408
          },
          {
            "timestamp": "2026-04-25 06:57:07,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4409
          },
          {
            "timestamp": "2026-04-25 06:57:07,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4410
          },
          {
            "timestamp": "2026-04-25 06:57:07,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4411
          },
          {
            "timestamp": "2026-04-25 06:57:07,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4412
          },
          {
            "timestamp": "2026-04-25 06:57:07,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4413
          },
          {
            "timestamp": "2026-04-25 06:57:07,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4414
          },
          {
            "timestamp": "2026-04-25 06:57:07,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4415
          },
          {
            "timestamp": "2026-04-25 06:57:07,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4416
          },
          {
            "timestamp": "2026-04-25 06:57:07,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4417
          },
          {
            "timestamp": "2026-04-25 06:57:07,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4418
          },
          {
            "timestamp": "2026-04-25 06:57:07,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4419
          },
          {
            "timestamp": "2026-04-25 06:57:07,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4420
          },
          {
            "timestamp": "2026-04-25 06:57:07,766",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4421
          },
          {
            "timestamp": "2026-04-25 06:57:07,766",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4422
          },
          {
            "timestamp": "2026-04-25 06:57:07,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4423
          },
          {
            "timestamp": "2026-04-25 06:57:07,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4424
          },
          {
            "timestamp": "2026-04-25 06:57:07,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4425
          },
          {
            "timestamp": "2026-04-25 06:57:07,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4426
          },
          {
            "timestamp": "2026-04-25 06:57:08,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4427
          },
          {
            "timestamp": "2026-04-25 06:57:08,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4428
          },
          {
            "timestamp": "2026-04-25 06:57:08,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4429
          },
          {
            "timestamp": "2026-04-25 06:57:08,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4430
          },
          {
            "timestamp": "2026-04-25 06:57:08,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4431
          },
          {
            "timestamp": "2026-04-25 06:57:08,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4432
          },
          {
            "timestamp": "2026-04-25 06:57:08,126",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4433
          },
          {
            "timestamp": "2026-04-25 06:57:08,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4434
          },
          {
            "timestamp": "2026-04-25 06:57:08,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4435
          },
          {
            "timestamp": "2026-04-25 06:57:08,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4436
          },
          {
            "timestamp": "2026-04-25 06:57:08,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4437
          },
          {
            "timestamp": "2026-04-25 06:57:08,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4438
          },
          {
            "timestamp": "2026-04-25 06:57:08,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4439
          },
          {
            "timestamp": "2026-04-25 06:57:08,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4440
          },
          {
            "timestamp": "2026-04-25 06:57:08,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4441
          },
          {
            "timestamp": "2026-04-25 06:57:08,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4442
          },
          {
            "timestamp": "2026-04-25 06:57:08,282",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4443
          },
          {
            "timestamp": "2026-04-25 06:57:08,282",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4444
          },
          {
            "timestamp": "2026-04-25 06:57:08,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4445
          },
          {
            "timestamp": "2026-04-25 06:57:08,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4446
          },
          {
            "timestamp": "2026-04-25 06:57:08,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4447
          },
          {
            "timestamp": "2026-04-25 06:57:08,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4448
          },
          {
            "timestamp": "2026-04-25 06:57:08,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4449
          },
          {
            "timestamp": "2026-04-25 06:57:08,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4450
          },
          {
            "timestamp": "2026-04-25 06:57:08,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4451
          },
          {
            "timestamp": "2026-04-25 06:57:08,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4452
          },
          {
            "timestamp": "2026-04-25 06:57:08,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4453
          },
          {
            "timestamp": "2026-04-25 06:57:08,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4454
          },
          {
            "timestamp": "2026-04-25 06:57:08,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4455
          },
          {
            "timestamp": "2026-04-25 06:57:08,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4456
          },
          {
            "timestamp": "2026-04-25 06:57:08,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4457
          },
          {
            "timestamp": "2026-04-25 06:57:08,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4458
          },
          {
            "timestamp": "2026-04-25 06:57:08,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4459
          },
          {
            "timestamp": "2026-04-25 06:57:08,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4460
          },
          {
            "timestamp": "2026-04-25 06:57:08,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4461
          },
          {
            "timestamp": "2026-04-25 06:57:08,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4462
          },
          {
            "timestamp": "2026-04-25 06:57:08,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4463
          },
          {
            "timestamp": "2026-04-25 06:57:08,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4464
          },
          {
            "timestamp": "2026-04-25 06:57:08,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4465
          },
          {
            "timestamp": "2026-04-25 06:57:08,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4466
          },
          {
            "timestamp": "2026-04-25 06:57:08,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4467
          },
          {
            "timestamp": "2026-04-25 06:57:08,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4468
          },
          {
            "timestamp": "2026-04-25 06:57:08,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4469
          },
          {
            "timestamp": "2026-04-25 06:57:08,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4470
          },
          {
            "timestamp": "2026-04-25 06:57:08,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4471
          },
          {
            "timestamp": "2026-04-25 06:57:08,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4472
          },
          {
            "timestamp": "2026-04-25 06:57:08,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4473
          },
          {
            "timestamp": "2026-04-25 06:57:08,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4474
          },
          {
            "timestamp": "2026-04-25 06:57:09,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4475
          },
          {
            "timestamp": "2026-04-25 06:57:09,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4476
          },
          {
            "timestamp": "2026-04-25 06:57:09,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4477
          },
          {
            "timestamp": "2026-04-25 06:57:09,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4478
          },
          {
            "timestamp": "2026-04-25 06:57:09,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4479
          },
          {
            "timestamp": "2026-04-25 06:57:09,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4480
          },
          {
            "timestamp": "2026-04-25 06:57:09,126",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4481
          },
          {
            "timestamp": "2026-04-25 06:57:09,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4482
          },
          {
            "timestamp": "2026-04-25 06:57:09,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4483
          },
          {
            "timestamp": "2026-04-25 06:57:09,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4484
          },
          {
            "timestamp": "2026-04-25 06:57:09,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4485
          },
          {
            "timestamp": "2026-04-25 06:57:09,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4486
          },
          {
            "timestamp": "2026-04-25 06:57:09,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4487
          },
          {
            "timestamp": "2026-04-25 06:57:09,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4488
          },
          {
            "timestamp": "2026-04-25 06:57:09,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4489
          },
          {
            "timestamp": "2026-04-25 06:57:09,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4490
          },
          {
            "timestamp": "2026-04-25 06:57:09,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4491
          },
          {
            "timestamp": "2026-04-25 06:57:09,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4492
          },
          {
            "timestamp": "2026-04-25 06:57:09,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4493
          },
          {
            "timestamp": "2026-04-25 06:57:09,313",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4494
          },
          {
            "timestamp": "2026-04-25 06:57:09,313",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4495
          },
          {
            "timestamp": "2026-04-25 06:57:09,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4496
          },
          {
            "timestamp": "2026-04-25 06:57:09,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4497
          },
          {
            "timestamp": "2026-04-25 06:57:09,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4498
          },
          {
            "timestamp": "2026-04-25 06:57:09,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4499
          },
          {
            "timestamp": "2026-04-25 06:57:09,438",
            "thread_id": "6948",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x056c2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4500
          },
          {
            "timestamp": "2026-04-25 06:57:09,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4501
          },
          {
            "timestamp": "2026-04-25 06:57:09,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4502
          },
          {
            "timestamp": "2026-04-25 06:57:09,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4503
          },
          {
            "timestamp": "2026-04-25 06:57:09,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4504
          },
          {
            "timestamp": "2026-04-25 06:57:09,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4505
          },
          {
            "timestamp": "2026-04-25 06:57:09,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4506
          },
          {
            "timestamp": "2026-04-25 06:57:09,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4507
          },
          {
            "timestamp": "2026-04-25 06:57:09,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4508
          },
          {
            "timestamp": "2026-04-25 06:57:09,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4509
          },
          {
            "timestamp": "2026-04-25 06:57:09,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4510
          },
          {
            "timestamp": "2026-04-25 06:57:09,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4511
          },
          {
            "timestamp": "2026-04-25 06:57:09,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4512
          },
          {
            "timestamp": "2026-04-25 06:57:09,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4513
          },
          {
            "timestamp": "2026-04-25 06:57:09,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4514
          },
          {
            "timestamp": "2026-04-25 06:57:09,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4515
          },
          {
            "timestamp": "2026-04-25 06:57:09,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4516
          },
          {
            "timestamp": "2026-04-25 06:57:09,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4517
          },
          {
            "timestamp": "2026-04-25 06:57:09,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4518
          },
          {
            "timestamp": "2026-04-25 06:57:09,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4519
          },
          {
            "timestamp": "2026-04-25 06:57:09,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4520
          },
          {
            "timestamp": "2026-04-25 06:57:09,829",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4521
          },
          {
            "timestamp": "2026-04-25 06:57:09,829",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4522
          },
          {
            "timestamp": "2026-04-25 06:57:09,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4523
          },
          {
            "timestamp": "2026-04-25 06:57:09,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4524
          },
          {
            "timestamp": "2026-04-25 06:57:09,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4525
          },
          {
            "timestamp": "2026-04-25 06:57:09,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4526
          },
          {
            "timestamp": "2026-04-25 06:57:09,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4527
          },
          {
            "timestamp": "2026-04-25 06:57:09,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4528
          },
          {
            "timestamp": "2026-04-25 06:57:10,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4529
          },
          {
            "timestamp": "2026-04-25 06:57:10,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4530
          },
          {
            "timestamp": "2026-04-25 06:57:10,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4531
          },
          {
            "timestamp": "2026-04-25 06:57:10,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4532
          },
          {
            "timestamp": "2026-04-25 06:57:10,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4533
          },
          {
            "timestamp": "2026-04-25 06:57:10,126",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4534
          },
          {
            "timestamp": "2026-04-25 06:57:10,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4535
          },
          {
            "timestamp": "2026-04-25 06:57:10,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4536
          },
          {
            "timestamp": "2026-04-25 06:57:10,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4537
          },
          {
            "timestamp": "2026-04-25 06:57:10,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4538
          },
          {
            "timestamp": "2026-04-25 06:57:10,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4539
          },
          {
            "timestamp": "2026-04-25 06:57:10,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4540
          },
          {
            "timestamp": "2026-04-25 06:57:10,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4541
          },
          {
            "timestamp": "2026-04-25 06:57:10,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4542
          },
          {
            "timestamp": "2026-04-25 06:57:10,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4543
          },
          {
            "timestamp": "2026-04-25 06:57:10,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4544
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4545
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x066b8000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4546
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4547
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4548
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4549
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4550
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000610",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1552"
              }
            ],
            "repeated": 0,
            "id": 4551
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1552"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 4552
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1552"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 4553
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 4554
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000610"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 4555
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1552"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 4556
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4557
          },
          {
            "timestamp": "2026-04-25 06:57:10,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4558
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1552"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4559
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 4560
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 4561
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 4562
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4563
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4564
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1552"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 4565
          },
          {
            "timestamp": "2026-04-25 06:57:10,297",
            "thread_id": "2660",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1552"
              }
            ],
            "repeated": 0,
            "id": 4566
          },
          {
            "timestamp": "2026-04-25 06:57:10,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4567
          },
          {
            "timestamp": "2026-04-25 06:57:10,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4568
          },
          {
            "timestamp": "2026-04-25 06:57:10,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4569
          },
          {
            "timestamp": "2026-04-25 06:57:10,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4570
          },
          {
            "timestamp": "2026-04-25 06:57:10,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4571
          },
          {
            "timestamp": "2026-04-25 06:57:10,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4572
          },
          {
            "timestamp": "2026-04-25 06:57:10,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4573
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "2660",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 4574
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "2660",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1552"
              }
            ],
            "repeated": 0,
            "id": 4575
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "2660",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 4576
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "2660",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 4577
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "2660",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 4578
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 4579
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "2660",
            "caller": "0x0507593a",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 4580
          },
          {
            "timestamp": "2026-04-25 06:57:10,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4581
          },
          {
            "timestamp": "2026-04-25 06:57:10,344",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4582
          },
          {
            "timestamp": "2026-04-25 06:57:10,344",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4583
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4584
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4585
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4586
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x0000062c"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc26f8"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "7440"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 4587
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x0000062c",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc26f8"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "7440"
              }
            ],
            "repeated": 0,
            "id": 4588
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "3116",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x0000062c"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "7440"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 4589
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "7440",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00e44000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4590
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "7440",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 4591
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "7440",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4592
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "7440",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 4593
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "7440",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 4594
          },
          {
            "timestamp": "2026-04-25 06:57:10,376",
            "thread_id": "7440",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08751000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4595
          },
          {
            "timestamp": "2026-04-25 06:57:10,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4596
          },
          {
            "timestamp": "2026-04-25 06:57:10,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4597
          },
          {
            "timestamp": "2026-04-25 06:57:10,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4598
          },
          {
            "timestamp": "2026-04-25 06:57:10,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4599
          },
          {
            "timestamp": "2026-04-25 06:57:10,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4600
          },
          {
            "timestamp": "2026-04-25 06:57:10,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4601
          },
          {
            "timestamp": "2026-04-25 06:57:10,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4602
          },
          {
            "timestamp": "2026-04-25 06:57:10,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4603
          },
          {
            "timestamp": "2026-04-25 06:57:10,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4604
          },
          {
            "timestamp": "2026-04-25 06:57:10,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4605
          },
          {
            "timestamp": "2026-04-25 06:57:10,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4606
          },
          {
            "timestamp": "2026-04-25 06:57:10,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4607
          },
          {
            "timestamp": "2026-04-25 06:57:10,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4608
          },
          {
            "timestamp": "2026-04-25 06:57:10,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4609
          },
          {
            "timestamp": "2026-04-25 06:57:10,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4610
          },
          {
            "timestamp": "2026-04-25 06:57:10,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4611
          },
          {
            "timestamp": "2026-04-25 06:57:10,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4612
          },
          {
            "timestamp": "2026-04-25 06:57:10,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4613
          },
          {
            "timestamp": "2026-04-25 06:57:10,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4614
          },
          {
            "timestamp": "2026-04-25 06:57:10,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4615
          },
          {
            "timestamp": "2026-04-25 06:57:10,860",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4616
          },
          {
            "timestamp": "2026-04-25 06:57:10,860",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4617
          },
          {
            "timestamp": "2026-04-25 06:57:10,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4618
          },
          {
            "timestamp": "2026-04-25 06:57:10,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4619
          },
          {
            "timestamp": "2026-04-25 06:57:10,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4620
          },
          {
            "timestamp": "2026-04-25 06:57:10,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4621
          },
          {
            "timestamp": "2026-04-25 06:57:10,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4622
          },
          {
            "timestamp": "2026-04-25 06:57:10,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4623
          },
          {
            "timestamp": "2026-04-25 06:57:11,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4624
          },
          {
            "timestamp": "2026-04-25 06:57:11,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4625
          },
          {
            "timestamp": "2026-04-25 06:57:11,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4626
          },
          {
            "timestamp": "2026-04-25 06:57:11,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4627
          },
          {
            "timestamp": "2026-04-25 06:57:11,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 4628
          },
          {
            "timestamp": "2026-04-25 06:57:11,141",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4629
          },
          {
            "timestamp": "2026-04-25 06:57:11,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4630
          },
          {
            "timestamp": "2026-04-25 06:57:11,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4631
          },
          {
            "timestamp": "2026-04-25 06:57:11,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4632
          },
          {
            "timestamp": "2026-04-25 06:57:11,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4633
          },
          {
            "timestamp": "2026-04-25 06:57:11,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4634
          },
          {
            "timestamp": "2026-04-25 06:57:11,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4635
          },
          {
            "timestamp": "2026-04-25 06:57:11,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4636
          },
          {
            "timestamp": "2026-04-25 06:57:11,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4637
          },
          {
            "timestamp": "2026-04-25 06:57:11,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4638
          },
          {
            "timestamp": "2026-04-25 06:57:11,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4639
          },
          {
            "timestamp": "2026-04-25 06:57:11,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4640
          },
          {
            "timestamp": "2026-04-25 06:57:11,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4641
          },
          {
            "timestamp": "2026-04-25 06:57:11,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4642
          },
          {
            "timestamp": "2026-04-25 06:57:11,376",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4643
          },
          {
            "timestamp": "2026-04-25 06:57:11,376",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4644
          },
          {
            "timestamp": "2026-04-25 06:57:11,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4645
          },
          {
            "timestamp": "2026-04-25 06:57:11,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4646
          },
          {
            "timestamp": "2026-04-25 06:57:11,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4647
          },
          {
            "timestamp": "2026-04-25 06:57:11,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4648
          },
          {
            "timestamp": "2026-04-25 06:57:11,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4649
          },
          {
            "timestamp": "2026-04-25 06:57:11,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4650
          },
          {
            "timestamp": "2026-04-25 06:57:11,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4651
          },
          {
            "timestamp": "2026-04-25 06:57:11,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4652
          },
          {
            "timestamp": "2026-04-25 06:57:11,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4653
          },
          {
            "timestamp": "2026-04-25 06:57:11,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4654
          },
          {
            "timestamp": "2026-04-25 06:57:11,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4655
          },
          {
            "timestamp": "2026-04-25 06:57:11,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4656
          },
          {
            "timestamp": "2026-04-25 06:57:11,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4657
          },
          {
            "timestamp": "2026-04-25 06:57:11,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4658
          },
          {
            "timestamp": "2026-04-25 06:57:11,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4659
          },
          {
            "timestamp": "2026-04-25 06:57:11,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4660
          },
          {
            "timestamp": "2026-04-25 06:57:11,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4661
          },
          {
            "timestamp": "2026-04-25 06:57:11,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4662
          },
          {
            "timestamp": "2026-04-25 06:57:11,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4663
          },
          {
            "timestamp": "2026-04-25 06:57:11,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4664
          },
          {
            "timestamp": "2026-04-25 06:57:11,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4665
          },
          {
            "timestamp": "2026-04-25 06:57:11,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4666
          },
          {
            "timestamp": "2026-04-25 06:57:11,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4667
          },
          {
            "timestamp": "2026-04-25 06:57:11,891",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4668
          },
          {
            "timestamp": "2026-04-25 06:57:11,891",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4669
          },
          {
            "timestamp": "2026-04-25 06:57:11,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4670
          },
          {
            "timestamp": "2026-04-25 06:57:11,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4671
          },
          {
            "timestamp": "2026-04-25 06:57:11,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4672
          },
          {
            "timestamp": "2026-04-25 06:57:12,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4673
          },
          {
            "timestamp": "2026-04-25 06:57:12,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4674
          },
          {
            "timestamp": "2026-04-25 06:57:12,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4675
          },
          {
            "timestamp": "2026-04-25 06:57:12,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4676
          },
          {
            "timestamp": "2026-04-25 06:57:12,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4677
          },
          {
            "timestamp": "2026-04-25 06:57:12,141",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4678
          },
          {
            "timestamp": "2026-04-25 06:57:12,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4679
          },
          {
            "timestamp": "2026-04-25 06:57:12,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4680
          },
          {
            "timestamp": "2026-04-25 06:57:12,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4681
          },
          {
            "timestamp": "2026-04-25 06:57:12,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4682
          },
          {
            "timestamp": "2026-04-25 06:57:12,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4683
          },
          {
            "timestamp": "2026-04-25 06:57:12,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4684
          },
          {
            "timestamp": "2026-04-25 06:57:12,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4685
          },
          {
            "timestamp": "2026-04-25 06:57:12,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4686
          },
          {
            "timestamp": "2026-04-25 06:57:12,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4687
          },
          {
            "timestamp": "2026-04-25 06:57:12,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4688
          },
          {
            "timestamp": "2026-04-25 06:57:12,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4689
          },
          {
            "timestamp": "2026-04-25 06:57:12,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4690
          },
          {
            "timestamp": "2026-04-25 06:57:12,407",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4691
          },
          {
            "timestamp": "2026-04-25 06:57:12,407",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4692
          },
          {
            "timestamp": "2026-04-25 06:57:12,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4693
          },
          {
            "timestamp": "2026-04-25 06:57:12,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4694
          },
          {
            "timestamp": "2026-04-25 06:57:12,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4695
          },
          {
            "timestamp": "2026-04-25 06:57:12,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4696
          },
          {
            "timestamp": "2026-04-25 06:57:12,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4697
          },
          {
            "timestamp": "2026-04-25 06:57:12,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4698
          },
          {
            "timestamp": "2026-04-25 06:57:12,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4699
          },
          {
            "timestamp": "2026-04-25 06:57:12,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4700
          },
          {
            "timestamp": "2026-04-25 06:57:12,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4701
          },
          {
            "timestamp": "2026-04-25 06:57:12,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4702
          },
          {
            "timestamp": "2026-04-25 06:57:12,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4703
          },
          {
            "timestamp": "2026-04-25 06:57:12,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4704
          },
          {
            "timestamp": "2026-04-25 06:57:12,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4705
          },
          {
            "timestamp": "2026-04-25 06:57:12,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4706
          },
          {
            "timestamp": "2026-04-25 06:57:12,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4707
          },
          {
            "timestamp": "2026-04-25 06:57:12,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4708
          },
          {
            "timestamp": "2026-04-25 06:57:12,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4709
          },
          {
            "timestamp": "2026-04-25 06:57:12,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4710
          },
          {
            "timestamp": "2026-04-25 06:57:12,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4711
          },
          {
            "timestamp": "2026-04-25 06:57:12,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4712
          },
          {
            "timestamp": "2026-04-25 06:57:12,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4713
          },
          {
            "timestamp": "2026-04-25 06:57:12,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4714
          },
          {
            "timestamp": "2026-04-25 06:57:12,922",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4715
          },
          {
            "timestamp": "2026-04-25 06:57:12,922",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4716
          },
          {
            "timestamp": "2026-04-25 06:57:12,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4717
          },
          {
            "timestamp": "2026-04-25 06:57:12,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4718
          },
          {
            "timestamp": "2026-04-25 06:57:12,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4719
          },
          {
            "timestamp": "2026-04-25 06:57:13,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4720
          },
          {
            "timestamp": "2026-04-25 06:57:13,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4721
          },
          {
            "timestamp": "2026-04-25 06:57:13,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4722
          },
          {
            "timestamp": "2026-04-25 06:57:13,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4723
          },
          {
            "timestamp": "2026-04-25 06:57:13,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4724
          },
          {
            "timestamp": "2026-04-25 06:57:13,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4725
          },
          {
            "timestamp": "2026-04-25 06:57:13,141",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4726
          },
          {
            "timestamp": "2026-04-25 06:57:13,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4727
          },
          {
            "timestamp": "2026-04-25 06:57:13,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4728
          },
          {
            "timestamp": "2026-04-25 06:57:13,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4729
          },
          {
            "timestamp": "2026-04-25 06:57:13,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4730
          },
          {
            "timestamp": "2026-04-25 06:57:13,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4731
          },
          {
            "timestamp": "2026-04-25 06:57:13,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4732
          },
          {
            "timestamp": "2026-04-25 06:57:13,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4733
          },
          {
            "timestamp": "2026-04-25 06:57:13,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4734
          },
          {
            "timestamp": "2026-04-25 06:57:13,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4735
          },
          {
            "timestamp": "2026-04-25 06:57:13,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4736
          },
          {
            "timestamp": "2026-04-25 06:57:13,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4737
          },
          {
            "timestamp": "2026-04-25 06:57:13,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4738
          },
          {
            "timestamp": "2026-04-25 06:57:13,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4739
          },
          {
            "timestamp": "2026-04-25 06:57:13,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4740
          },
          {
            "timestamp": "2026-04-25 06:57:13,422",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4741
          },
          {
            "timestamp": "2026-04-25 06:57:13,422",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4742
          },
          {
            "timestamp": "2026-04-25 06:57:13,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4743
          },
          {
            "timestamp": "2026-04-25 06:57:13,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4744
          },
          {
            "timestamp": "2026-04-25 06:57:13,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4745
          },
          {
            "timestamp": "2026-04-25 06:57:13,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4746
          },
          {
            "timestamp": "2026-04-25 06:57:13,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4747
          },
          {
            "timestamp": "2026-04-25 06:57:13,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4748
          },
          {
            "timestamp": "2026-04-25 06:57:13,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4749
          },
          {
            "timestamp": "2026-04-25 06:57:13,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4750
          },
          {
            "timestamp": "2026-04-25 06:57:13,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4751
          },
          {
            "timestamp": "2026-04-25 06:57:13,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4752
          },
          {
            "timestamp": "2026-04-25 06:57:13,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4753
          },
          {
            "timestamp": "2026-04-25 06:57:13,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4754
          },
          {
            "timestamp": "2026-04-25 06:57:13,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4755
          },
          {
            "timestamp": "2026-04-25 06:57:13,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4756
          },
          {
            "timestamp": "2026-04-25 06:57:13,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4757
          },
          {
            "timestamp": "2026-04-25 06:57:13,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4758
          },
          {
            "timestamp": "2026-04-25 06:57:13,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4759
          },
          {
            "timestamp": "2026-04-25 06:57:13,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4760
          },
          {
            "timestamp": "2026-04-25 06:57:13,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4761
          },
          {
            "timestamp": "2026-04-25 06:57:13,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4762
          },
          {
            "timestamp": "2026-04-25 06:57:13,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4763
          },
          {
            "timestamp": "2026-04-25 06:57:13,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4764
          },
          {
            "timestamp": "2026-04-25 06:57:13,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4765
          },
          {
            "timestamp": "2026-04-25 06:57:13,938",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4766
          },
          {
            "timestamp": "2026-04-25 06:57:13,938",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4767
          },
          {
            "timestamp": "2026-04-25 06:57:13,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4768
          },
          {
            "timestamp": "2026-04-25 06:57:13,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4769
          },
          {
            "timestamp": "2026-04-25 06:57:13,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4770
          },
          {
            "timestamp": "2026-04-25 06:57:14,016",
            "thread_id": "1416",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x056d2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4771
          },
          {
            "timestamp": "2026-04-25 06:57:14,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4772
          },
          {
            "timestamp": "2026-04-25 06:57:14,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4773
          },
          {
            "timestamp": "2026-04-25 06:57:14,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4774
          },
          {
            "timestamp": "2026-04-25 06:57:14,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4775
          },
          {
            "timestamp": "2026-04-25 06:57:14,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4776
          },
          {
            "timestamp": "2026-04-25 06:57:14,141",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4777
          },
          {
            "timestamp": "2026-04-25 06:57:14,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4778
          },
          {
            "timestamp": "2026-04-25 06:57:14,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4779
          },
          {
            "timestamp": "2026-04-25 06:57:14,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4780
          },
          {
            "timestamp": "2026-04-25 06:57:14,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4781
          },
          {
            "timestamp": "2026-04-25 06:57:14,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4782
          },
          {
            "timestamp": "2026-04-25 06:57:14,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4783
          },
          {
            "timestamp": "2026-04-25 06:57:14,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4784
          },
          {
            "timestamp": "2026-04-25 06:57:14,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4785
          },
          {
            "timestamp": "2026-04-25 06:57:14,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4786
          },
          {
            "timestamp": "2026-04-25 06:57:14,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4787
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4788
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x066d8000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4789
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4790
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4791
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4792
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 4793
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000634",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1588"
              }
            ],
            "repeated": 0,
            "id": 4794
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 4795
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 4796
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 4797
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000634"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 4798
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 4799
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4800
          },
          {
            "timestamp": "2026-04-25 06:57:14,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4801
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 4802
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x0000062c"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\x80t\\x00T\\x19\\x00\\x00\\x10\\x1d\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "7440"
              }
            ],
            "repeated": 0,
            "id": 4803
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 4804
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 4805
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 4806
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4807
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 4808
          },
          {
            "timestamp": "2026-04-25 06:57:14,360",
            "thread_id": "7440",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1588"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 4809
          },
          {
            "timestamp": "2026-04-25 06:57:14,376",
            "thread_id": "7440",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              }
            ],
            "repeated": 0,
            "id": 4810
          },
          {
            "timestamp": "2026-04-25 06:57:14,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4811
          },
          {
            "timestamp": "2026-04-25 06:57:14,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4812
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4813
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4814
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4815
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4816
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4817
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 4818
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "3116",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              }
            ],
            "repeated": 0,
            "id": 4819
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x0507da9f",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 8,
            "id": 4820
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "3116",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 4821
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "3116",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 4822
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "3116",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 4823
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 4824
          },
          {
            "timestamp": "2026-04-25 06:57:14,391",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 4825
          },
          {
            "timestamp": "2026-04-25 06:57:14,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4826
          },
          {
            "timestamp": "2026-04-25 06:57:14,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4827
          },
          {
            "timestamp": "2026-04-25 06:57:14,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4828
          },
          {
            "timestamp": "2026-04-25 06:57:14,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4829
          },
          {
            "timestamp": "2026-04-25 06:57:14,454",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4830
          },
          {
            "timestamp": "2026-04-25 06:57:14,454",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4831
          },
          {
            "timestamp": "2026-04-25 06:57:14,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4832
          },
          {
            "timestamp": "2026-04-25 06:57:14,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4833
          },
          {
            "timestamp": "2026-04-25 06:57:14,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4834
          },
          {
            "timestamp": "2026-04-25 06:57:14,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4835
          },
          {
            "timestamp": "2026-04-25 06:57:14,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4836
          },
          {
            "timestamp": "2026-04-25 06:57:14,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4837
          },
          {
            "timestamp": "2026-04-25 06:57:14,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4838
          },
          {
            "timestamp": "2026-04-25 06:57:14,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4839
          },
          {
            "timestamp": "2026-04-25 06:57:14,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4840
          },
          {
            "timestamp": "2026-04-25 06:57:14,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4841
          },
          {
            "timestamp": "2026-04-25 06:57:14,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4842
          },
          {
            "timestamp": "2026-04-25 06:57:14,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4843
          },
          {
            "timestamp": "2026-04-25 06:57:14,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4844
          },
          {
            "timestamp": "2026-04-25 06:57:14,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4845
          },
          {
            "timestamp": "2026-04-25 06:57:14,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4846
          },
          {
            "timestamp": "2026-04-25 06:57:14,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4847
          },
          {
            "timestamp": "2026-04-25 06:57:14,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4848
          },
          {
            "timestamp": "2026-04-25 06:57:14,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4849
          },
          {
            "timestamp": "2026-04-25 06:57:14,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4850
          },
          {
            "timestamp": "2026-04-25 06:57:14,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4851
          },
          {
            "timestamp": "2026-04-25 06:57:14,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4852
          },
          {
            "timestamp": "2026-04-25 06:57:14,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4853
          },
          {
            "timestamp": "2026-04-25 06:57:14,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4854
          },
          {
            "timestamp": "2026-04-25 06:57:14,969",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4855
          },
          {
            "timestamp": "2026-04-25 06:57:14,969",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4856
          },
          {
            "timestamp": "2026-04-25 06:57:15,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4857
          },
          {
            "timestamp": "2026-04-25 06:57:15,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4858
          },
          {
            "timestamp": "2026-04-25 06:57:15,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4859
          },
          {
            "timestamp": "2026-04-25 06:57:15,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4860
          },
          {
            "timestamp": "2026-04-25 06:57:15,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4861
          },
          {
            "timestamp": "2026-04-25 06:57:15,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4862
          },
          {
            "timestamp": "2026-04-25 06:57:15,141",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4863
          },
          {
            "timestamp": "2026-04-25 06:57:15,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4864
          },
          {
            "timestamp": "2026-04-25 06:57:15,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4865
          },
          {
            "timestamp": "2026-04-25 06:57:15,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4866
          },
          {
            "timestamp": "2026-04-25 06:57:15,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4867
          },
          {
            "timestamp": "2026-04-25 06:57:15,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4868
          },
          {
            "timestamp": "2026-04-25 06:57:15,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4869
          },
          {
            "timestamp": "2026-04-25 06:57:15,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4870
          },
          {
            "timestamp": "2026-04-25 06:57:15,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4871
          },
          {
            "timestamp": "2026-04-25 06:57:15,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4872
          },
          {
            "timestamp": "2026-04-25 06:57:15,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4873
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0788142c",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "K32EnumProcesses",
            "status": true,
            "return": "0x00000001",
            "arguments": [],
            "repeated": 0,
            "id": 4874
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x066f8000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4875
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": false,
            "return": "0xffffffffc0000004",
            "pretty_return": "INFO_LENGTH_MISMATCH",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 4876
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06718000"
              },
              {
                "name": "RegionSize",
                "value": "0x00035000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4877
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 4878
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x056e2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4879
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x056f2000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4880
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05702000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4881
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05712000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 4882
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x0288a3a6",
            "parentcaller": "0x0507b764",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 4883
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4884
          },
          {
            "timestamp": "2026-04-25 06:57:15,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4885
          },
          {
            "timestamp": "2026-04-25 06:57:15,422",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076bc7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 4886
          },
          {
            "timestamp": "2026-04-25 06:57:15,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4887
          },
          {
            "timestamp": "2026-04-25 06:57:15,485",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4888
          },
          {
            "timestamp": "2026-04-25 06:57:15,485",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4889
          },
          {
            "timestamp": "2026-04-25 06:57:15,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4890
          },
          {
            "timestamp": "2026-04-25 06:57:15,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4891
          },
          {
            "timestamp": "2026-04-25 06:57:15,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4892
          },
          {
            "timestamp": "2026-04-25 06:57:15,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4893
          },
          {
            "timestamp": "2026-04-25 06:57:15,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4894
          },
          {
            "timestamp": "2026-04-25 06:57:15,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4895
          },
          {
            "timestamp": "2026-04-25 06:57:15,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4896
          },
          {
            "timestamp": "2026-04-25 06:57:15,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4897
          },
          {
            "timestamp": "2026-04-25 06:57:15,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4898
          },
          {
            "timestamp": "2026-04-25 06:57:15,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4899
          },
          {
            "timestamp": "2026-04-25 06:57:15,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4900
          },
          {
            "timestamp": "2026-04-25 06:57:15,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4901
          },
          {
            "timestamp": "2026-04-25 06:57:15,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4902
          },
          {
            "timestamp": "2026-04-25 06:57:15,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4903
          },
          {
            "timestamp": "2026-04-25 06:57:15,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4904
          },
          {
            "timestamp": "2026-04-25 06:57:15,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4905
          },
          {
            "timestamp": "2026-04-25 06:57:15,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4906
          },
          {
            "timestamp": "2026-04-25 06:57:15,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4907
          },
          {
            "timestamp": "2026-04-25 06:57:15,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4908
          },
          {
            "timestamp": "2026-04-25 06:57:15,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4909
          },
          {
            "timestamp": "2026-04-25 06:57:15,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4910
          },
          {
            "timestamp": "2026-04-25 06:57:15,985",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4911
          },
          {
            "timestamp": "2026-04-25 06:57:15,985",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4912
          },
          {
            "timestamp": "2026-04-25 06:57:16,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4913
          },
          {
            "timestamp": "2026-04-25 06:57:16,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4914
          },
          {
            "timestamp": "2026-04-25 06:57:16,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4915
          },
          {
            "timestamp": "2026-04-25 06:57:16,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4916
          },
          {
            "timestamp": "2026-04-25 06:57:16,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4917
          },
          {
            "timestamp": "2026-04-25 06:57:16,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4918
          },
          {
            "timestamp": "2026-04-25 06:57:16,141",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 4919
          },
          {
            "timestamp": "2026-04-25 06:57:16,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4920
          },
          {
            "timestamp": "2026-04-25 06:57:16,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4921
          },
          {
            "timestamp": "2026-04-25 06:57:16,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4922
          },
          {
            "timestamp": "2026-04-25 06:57:16,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4923
          },
          {
            "timestamp": "2026-04-25 06:57:16,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4924
          },
          {
            "timestamp": "2026-04-25 06:57:16,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4925
          },
          {
            "timestamp": "2026-04-25 06:57:16,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4926
          },
          {
            "timestamp": "2026-04-25 06:57:16,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4927
          },
          {
            "timestamp": "2026-04-25 06:57:16,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4928
          },
          {
            "timestamp": "2026-04-25 06:57:16,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4929
          },
          {
            "timestamp": "2026-04-25 06:57:16,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4930
          },
          {
            "timestamp": "2026-04-25 06:57:16,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4931
          },
          {
            "timestamp": "2026-04-25 06:57:16,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4932
          },
          {
            "timestamp": "2026-04-25 06:57:16,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4933
          },
          {
            "timestamp": "2026-04-25 06:57:16,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4934
          },
          {
            "timestamp": "2026-04-25 06:57:16,501",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4935
          },
          {
            "timestamp": "2026-04-25 06:57:16,501",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4936
          },
          {
            "timestamp": "2026-04-25 06:57:16,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4937
          },
          {
            "timestamp": "2026-04-25 06:57:16,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4938
          },
          {
            "timestamp": "2026-04-25 06:57:16,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4939
          },
          {
            "timestamp": "2026-04-25 06:57:16,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4940
          },
          {
            "timestamp": "2026-04-25 06:57:16,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4941
          },
          {
            "timestamp": "2026-04-25 06:57:16,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4942
          },
          {
            "timestamp": "2026-04-25 06:57:16,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4943
          },
          {
            "timestamp": "2026-04-25 06:57:16,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4944
          },
          {
            "timestamp": "2026-04-25 06:57:16,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4945
          },
          {
            "timestamp": "2026-04-25 06:57:16,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4946
          },
          {
            "timestamp": "2026-04-25 06:57:16,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4947
          },
          {
            "timestamp": "2026-04-25 06:57:16,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4948
          },
          {
            "timestamp": "2026-04-25 06:57:16,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4949
          },
          {
            "timestamp": "2026-04-25 06:57:16,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4950
          },
          {
            "timestamp": "2026-04-25 06:57:16,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4951
          },
          {
            "timestamp": "2026-04-25 06:57:16,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4952
          },
          {
            "timestamp": "2026-04-25 06:57:16,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4953
          },
          {
            "timestamp": "2026-04-25 06:57:16,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4954
          },
          {
            "timestamp": "2026-04-25 06:57:16,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4955
          },
          {
            "timestamp": "2026-04-25 06:57:16,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4956
          },
          {
            "timestamp": "2026-04-25 06:57:16,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4957
          },
          {
            "timestamp": "2026-04-25 06:57:16,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4958
          },
          {
            "timestamp": "2026-04-25 06:57:17,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4959
          },
          {
            "timestamp": "2026-04-25 06:57:17,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4960
          },
          {
            "timestamp": "2026-04-25 06:57:17,016",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4961
          },
          {
            "timestamp": "2026-04-25 06:57:17,016",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4962
          },
          {
            "timestamp": "2026-04-25 06:57:17,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4963
          },
          {
            "timestamp": "2026-04-25 06:57:17,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4964
          },
          {
            "timestamp": "2026-04-25 06:57:17,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4965
          },
          {
            "timestamp": "2026-04-25 06:57:17,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4966
          },
          {
            "timestamp": "2026-04-25 06:57:17,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4967
          },
          {
            "timestamp": "2026-04-25 06:57:17,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4968
          },
          {
            "timestamp": "2026-04-25 06:57:17,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4969
          },
          {
            "timestamp": "2026-04-25 06:57:17,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4970
          },
          {
            "timestamp": "2026-04-25 06:57:17,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4971
          },
          {
            "timestamp": "2026-04-25 06:57:17,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4972
          },
          {
            "timestamp": "2026-04-25 06:57:17,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4973
          },
          {
            "timestamp": "2026-04-25 06:57:17,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4974
          },
          {
            "timestamp": "2026-04-25 06:57:17,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4975
          },
          {
            "timestamp": "2026-04-25 06:57:17,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4976
          },
          {
            "timestamp": "2026-04-25 06:57:17,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4977
          },
          {
            "timestamp": "2026-04-25 06:57:17,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4978
          },
          {
            "timestamp": "2026-04-25 06:57:17,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4979
          },
          {
            "timestamp": "2026-04-25 06:57:17,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4980
          },
          {
            "timestamp": "2026-04-25 06:57:17,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4981
          },
          {
            "timestamp": "2026-04-25 06:57:17,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4982
          },
          {
            "timestamp": "2026-04-25 06:57:17,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4983
          },
          {
            "timestamp": "2026-04-25 06:57:17,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4984
          },
          {
            "timestamp": "2026-04-25 06:57:17,532",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 4985
          },
          {
            "timestamp": "2026-04-25 06:57:17,532",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 4986
          },
          {
            "timestamp": "2026-04-25 06:57:17,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4987
          },
          {
            "timestamp": "2026-04-25 06:57:17,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4988
          },
          {
            "timestamp": "2026-04-25 06:57:17,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4989
          },
          {
            "timestamp": "2026-04-25 06:57:17,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4990
          },
          {
            "timestamp": "2026-04-25 06:57:17,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4991
          },
          {
            "timestamp": "2026-04-25 06:57:17,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 4992
          },
          {
            "timestamp": "2026-04-25 06:57:17,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4993
          },
          {
            "timestamp": "2026-04-25 06:57:17,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4994
          },
          {
            "timestamp": "2026-04-25 06:57:17,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 4995
          },
          {
            "timestamp": "2026-04-25 06:57:17,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4996
          },
          {
            "timestamp": "2026-04-25 06:57:17,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4997
          },
          {
            "timestamp": "2026-04-25 06:57:17,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 4998
          },
          {
            "timestamp": "2026-04-25 06:57:17,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 4999
          },
          {
            "timestamp": "2026-04-25 06:57:17,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5000
          },
          {
            "timestamp": "2026-04-25 06:57:17,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5001
          },
          {
            "timestamp": "2026-04-25 06:57:17,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5002
          },
          {
            "timestamp": "2026-04-25 06:57:17,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5003
          },
          {
            "timestamp": "2026-04-25 06:57:18,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5004
          },
          {
            "timestamp": "2026-04-25 06:57:18,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5005
          },
          {
            "timestamp": "2026-04-25 06:57:18,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5006
          },
          {
            "timestamp": "2026-04-25 06:57:18,047",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5007
          },
          {
            "timestamp": "2026-04-25 06:57:18,047",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5008
          },
          {
            "timestamp": "2026-04-25 06:57:18,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5009
          },
          {
            "timestamp": "2026-04-25 06:57:18,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5010
          },
          {
            "timestamp": "2026-04-25 06:57:18,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5011
          },
          {
            "timestamp": "2026-04-25 06:57:18,141",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5012
          },
          {
            "timestamp": "2026-04-25 06:57:18,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5013
          },
          {
            "timestamp": "2026-04-25 06:57:18,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5014
          },
          {
            "timestamp": "2026-04-25 06:57:18,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5015
          },
          {
            "timestamp": "2026-04-25 06:57:18,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5016
          },
          {
            "timestamp": "2026-04-25 06:57:18,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5017
          },
          {
            "timestamp": "2026-04-25 06:57:18,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5018
          },
          {
            "timestamp": "2026-04-25 06:57:18,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5019
          },
          {
            "timestamp": "2026-04-25 06:57:18,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5020
          },
          {
            "timestamp": "2026-04-25 06:57:18,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5021
          },
          {
            "timestamp": "2026-04-25 06:57:18,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5022
          },
          {
            "timestamp": "2026-04-25 06:57:18,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5023
          },
          {
            "timestamp": "2026-04-25 06:57:18,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5024
          },
          {
            "timestamp": "2026-04-25 06:57:18,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5025
          },
          {
            "timestamp": "2026-04-25 06:57:18,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5026
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5027
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0674d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5028
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5029
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5030
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 5031
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5032
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x0000064c",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1612"
              }
            ],
            "repeated": 0,
            "id": 5033
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 5034
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 5035
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 5036
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000064c"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 5037
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 5038
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5039
          },
          {
            "timestamp": "2026-04-25 06:57:18,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5040
          },
          {
            "timestamp": "2026-04-25 06:57:18,422",
            "thread_id": "3116",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 5041
          },
          {
            "timestamp": "2026-04-25 06:57:18,422",
            "thread_id": "3116",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 5042
          },
          {
            "timestamp": "2026-04-25 06:57:18,422",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 5043
          },
          {
            "timestamp": "2026-04-25 06:57:18,422",
            "thread_id": "3116",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 5044
          },
          {
            "timestamp": "2026-04-25 06:57:18,422",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 5045
          },
          {
            "timestamp": "2026-04-25 06:57:18,438",
            "thread_id": "3116",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 5046
          },
          {
            "timestamp": "2026-04-25 06:57:18,438",
            "thread_id": "3116",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1612"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 5047
          },
          {
            "timestamp": "2026-04-25 06:57:18,438",
            "thread_id": "3116",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              }
            ],
            "repeated": 0,
            "id": 5048
          },
          {
            "timestamp": "2026-04-25 06:57:18,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5049
          },
          {
            "timestamp": "2026-04-25 06:57:18,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5050
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5051
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5052
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5053
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5054
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5055
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "7440",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 5056
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "7440",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              }
            ],
            "repeated": 0,
            "id": 5057
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "7440",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 5058
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "7440",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 5059
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "7440",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 14,
            "id": 5060
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 5061
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5062
          },
          {
            "timestamp": "2026-04-25 06:57:18,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5063
          },
          {
            "timestamp": "2026-04-25 06:57:18,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5064
          },
          {
            "timestamp": "2026-04-25 06:57:18,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5065
          },
          {
            "timestamp": "2026-04-25 06:57:18,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5066
          },
          {
            "timestamp": "2026-04-25 06:57:18,563",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5067
          },
          {
            "timestamp": "2026-04-25 06:57:18,563",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5068
          },
          {
            "timestamp": "2026-04-25 06:57:18,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5069
          },
          {
            "timestamp": "2026-04-25 06:57:18,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5070
          },
          {
            "timestamp": "2026-04-25 06:57:18,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5071
          },
          {
            "timestamp": "2026-04-25 06:57:18,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5072
          },
          {
            "timestamp": "2026-04-25 06:57:18,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5073
          },
          {
            "timestamp": "2026-04-25 06:57:18,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5074
          },
          {
            "timestamp": "2026-04-25 06:57:18,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5075
          },
          {
            "timestamp": "2026-04-25 06:57:18,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5076
          },
          {
            "timestamp": "2026-04-25 06:57:18,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5077
          },
          {
            "timestamp": "2026-04-25 06:57:18,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5078
          },
          {
            "timestamp": "2026-04-25 06:57:18,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5079
          },
          {
            "timestamp": "2026-04-25 06:57:18,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5080
          },
          {
            "timestamp": "2026-04-25 06:57:18,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5081
          },
          {
            "timestamp": "2026-04-25 06:57:18,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5082
          },
          {
            "timestamp": "2026-04-25 06:57:18,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5083
          },
          {
            "timestamp": "2026-04-25 06:57:18,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5084
          },
          {
            "timestamp": "2026-04-25 06:57:18,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5085
          },
          {
            "timestamp": "2026-04-25 06:57:18,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5086
          },
          {
            "timestamp": "2026-04-25 06:57:18,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5087
          },
          {
            "timestamp": "2026-04-25 06:57:19,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5088
          },
          {
            "timestamp": "2026-04-25 06:57:19,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5089
          },
          {
            "timestamp": "2026-04-25 06:57:19,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5090
          },
          {
            "timestamp": "2026-04-25 06:57:19,079",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5091
          },
          {
            "timestamp": "2026-04-25 06:57:19,079",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5092
          },
          {
            "timestamp": "2026-04-25 06:57:19,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5093
          },
          {
            "timestamp": "2026-04-25 06:57:19,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5094
          },
          {
            "timestamp": "2026-04-25 06:57:19,141",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5095
          },
          {
            "timestamp": "2026-04-25 06:57:19,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5096
          },
          {
            "timestamp": "2026-04-25 06:57:19,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5097
          },
          {
            "timestamp": "2026-04-25 06:57:19,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5098
          },
          {
            "timestamp": "2026-04-25 06:57:19,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5099
          },
          {
            "timestamp": "2026-04-25 06:57:19,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5100
          },
          {
            "timestamp": "2026-04-25 06:57:19,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5101
          },
          {
            "timestamp": "2026-04-25 06:57:19,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5102
          },
          {
            "timestamp": "2026-04-25 06:57:19,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5103
          },
          {
            "timestamp": "2026-04-25 06:57:19,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5104
          },
          {
            "timestamp": "2026-04-25 06:57:19,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5105
          },
          {
            "timestamp": "2026-04-25 06:57:19,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5106
          },
          {
            "timestamp": "2026-04-25 06:57:19,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5107
          },
          {
            "timestamp": "2026-04-25 06:57:19,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5108
          },
          {
            "timestamp": "2026-04-25 06:57:19,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5109
          },
          {
            "timestamp": "2026-04-25 06:57:19,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5110
          },
          {
            "timestamp": "2026-04-25 06:57:19,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5111
          },
          {
            "timestamp": "2026-04-25 06:57:19,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5112
          },
          {
            "timestamp": "2026-04-25 06:57:19,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5113
          },
          {
            "timestamp": "2026-04-25 06:57:19,579",
            "thread_id": "6948",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05722000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5114
          },
          {
            "timestamp": "2026-04-25 06:57:19,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5115
          },
          {
            "timestamp": "2026-04-25 06:57:19,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5116
          },
          {
            "timestamp": "2026-04-25 06:57:19,594",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5117
          },
          {
            "timestamp": "2026-04-25 06:57:19,594",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5118
          },
          {
            "timestamp": "2026-04-25 06:57:19,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5119
          },
          {
            "timestamp": "2026-04-25 06:57:19,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5120
          },
          {
            "timestamp": "2026-04-25 06:57:19,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5121
          },
          {
            "timestamp": "2026-04-25 06:57:19,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5122
          },
          {
            "timestamp": "2026-04-25 06:57:19,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5123
          },
          {
            "timestamp": "2026-04-25 06:57:19,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5124
          },
          {
            "timestamp": "2026-04-25 06:57:19,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5125
          },
          {
            "timestamp": "2026-04-25 06:57:19,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5126
          },
          {
            "timestamp": "2026-04-25 06:57:19,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5127
          },
          {
            "timestamp": "2026-04-25 06:57:19,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5128
          },
          {
            "timestamp": "2026-04-25 06:57:19,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5129
          },
          {
            "timestamp": "2026-04-25 06:57:19,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5130
          },
          {
            "timestamp": "2026-04-25 06:57:19,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5131
          },
          {
            "timestamp": "2026-04-25 06:57:19,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5132
          },
          {
            "timestamp": "2026-04-25 06:57:19,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5133
          },
          {
            "timestamp": "2026-04-25 06:57:20,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5134
          },
          {
            "timestamp": "2026-04-25 06:57:20,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5135
          },
          {
            "timestamp": "2026-04-25 06:57:20,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5136
          },
          {
            "timestamp": "2026-04-25 06:57:20,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5137
          },
          {
            "timestamp": "2026-04-25 06:57:20,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 5138
          },
          {
            "timestamp": "2026-04-25 06:57:20,110",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5139
          },
          {
            "timestamp": "2026-04-25 06:57:20,110",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5140
          },
          {
            "timestamp": "2026-04-25 06:57:20,157",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5141
          },
          {
            "timestamp": "2026-04-25 06:57:20,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5142
          },
          {
            "timestamp": "2026-04-25 06:57:20,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5143
          },
          {
            "timestamp": "2026-04-25 06:57:20,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5144
          },
          {
            "timestamp": "2026-04-25 06:57:20,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5145
          },
          {
            "timestamp": "2026-04-25 06:57:20,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5146
          },
          {
            "timestamp": "2026-04-25 06:57:20,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5147
          },
          {
            "timestamp": "2026-04-25 06:57:20,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5148
          },
          {
            "timestamp": "2026-04-25 06:57:20,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5149
          },
          {
            "timestamp": "2026-04-25 06:57:20,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5150
          },
          {
            "timestamp": "2026-04-25 06:57:20,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5151
          },
          {
            "timestamp": "2026-04-25 06:57:20,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5152
          },
          {
            "timestamp": "2026-04-25 06:57:20,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5153
          },
          {
            "timestamp": "2026-04-25 06:57:20,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5154
          },
          {
            "timestamp": "2026-04-25 06:57:20,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5155
          },
          {
            "timestamp": "2026-04-25 06:57:20,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5156
          },
          {
            "timestamp": "2026-04-25 06:57:20,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5157
          },
          {
            "timestamp": "2026-04-25 06:57:20,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5158
          },
          {
            "timestamp": "2026-04-25 06:57:20,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5159
          },
          {
            "timestamp": "2026-04-25 06:57:20,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5160
          },
          {
            "timestamp": "2026-04-25 06:57:20,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5161
          },
          {
            "timestamp": "2026-04-25 06:57:20,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5162
          },
          {
            "timestamp": "2026-04-25 06:57:20,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5163
          },
          {
            "timestamp": "2026-04-25 06:57:20,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5164
          },
          {
            "timestamp": "2026-04-25 06:57:20,610",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5165
          },
          {
            "timestamp": "2026-04-25 06:57:20,610",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5166
          },
          {
            "timestamp": "2026-04-25 06:57:20,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5167
          },
          {
            "timestamp": "2026-04-25 06:57:20,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5168
          },
          {
            "timestamp": "2026-04-25 06:57:20,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5169
          },
          {
            "timestamp": "2026-04-25 06:57:20,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5170
          },
          {
            "timestamp": "2026-04-25 06:57:20,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5171
          },
          {
            "timestamp": "2026-04-25 06:57:20,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5172
          },
          {
            "timestamp": "2026-04-25 06:57:20,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5173
          },
          {
            "timestamp": "2026-04-25 06:57:20,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5174
          },
          {
            "timestamp": "2026-04-25 06:57:20,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5175
          },
          {
            "timestamp": "2026-04-25 06:57:20,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5176
          },
          {
            "timestamp": "2026-04-25 06:57:20,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5177
          },
          {
            "timestamp": "2026-04-25 06:57:20,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5178
          },
          {
            "timestamp": "2026-04-25 06:57:20,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5179
          },
          {
            "timestamp": "2026-04-25 06:57:20,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5180
          },
          {
            "timestamp": "2026-04-25 06:57:21,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5181
          },
          {
            "timestamp": "2026-04-25 06:57:21,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5182
          },
          {
            "timestamp": "2026-04-25 06:57:21,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5183
          },
          {
            "timestamp": "2026-04-25 06:57:21,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5184
          },
          {
            "timestamp": "2026-04-25 06:57:21,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5185
          },
          {
            "timestamp": "2026-04-25 06:57:21,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 5186
          },
          {
            "timestamp": "2026-04-25 06:57:21,126",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5187
          },
          {
            "timestamp": "2026-04-25 06:57:21,126",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5188
          },
          {
            "timestamp": "2026-04-25 06:57:21,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5189
          },
          {
            "timestamp": "2026-04-25 06:57:21,172",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5190
          },
          {
            "timestamp": "2026-04-25 06:57:21,172",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5191
          },
          {
            "timestamp": "2026-04-25 06:57:21,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5192
          },
          {
            "timestamp": "2026-04-25 06:57:21,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5193
          },
          {
            "timestamp": "2026-04-25 06:57:21,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5194
          },
          {
            "timestamp": "2026-04-25 06:57:21,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5195
          },
          {
            "timestamp": "2026-04-25 06:57:21,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5196
          },
          {
            "timestamp": "2026-04-25 06:57:21,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5197
          },
          {
            "timestamp": "2026-04-25 06:57:21,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5198
          },
          {
            "timestamp": "2026-04-25 06:57:21,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5199
          },
          {
            "timestamp": "2026-04-25 06:57:21,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5200
          },
          {
            "timestamp": "2026-04-25 06:57:21,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5201
          },
          {
            "timestamp": "2026-04-25 06:57:21,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5202
          },
          {
            "timestamp": "2026-04-25 06:57:21,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5203
          },
          {
            "timestamp": "2026-04-25 06:57:21,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5204
          },
          {
            "timestamp": "2026-04-25 06:57:21,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5205
          },
          {
            "timestamp": "2026-04-25 06:57:21,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5206
          },
          {
            "timestamp": "2026-04-25 06:57:21,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5207
          },
          {
            "timestamp": "2026-04-25 06:57:21,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5208
          },
          {
            "timestamp": "2026-04-25 06:57:21,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5209
          },
          {
            "timestamp": "2026-04-25 06:57:21,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5210
          },
          {
            "timestamp": "2026-04-25 06:57:21,626",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5211
          },
          {
            "timestamp": "2026-04-25 06:57:21,626",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5212
          },
          {
            "timestamp": "2026-04-25 06:57:21,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5213
          },
          {
            "timestamp": "2026-04-25 06:57:21,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5214
          },
          {
            "timestamp": "2026-04-25 06:57:21,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5215
          },
          {
            "timestamp": "2026-04-25 06:57:21,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5216
          },
          {
            "timestamp": "2026-04-25 06:57:21,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5217
          },
          {
            "timestamp": "2026-04-25 06:57:21,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5218
          },
          {
            "timestamp": "2026-04-25 06:57:21,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5219
          },
          {
            "timestamp": "2026-04-25 06:57:21,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5220
          },
          {
            "timestamp": "2026-04-25 06:57:21,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5221
          },
          {
            "timestamp": "2026-04-25 06:57:21,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5222
          },
          {
            "timestamp": "2026-04-25 06:57:21,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5223
          },
          {
            "timestamp": "2026-04-25 06:57:21,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5224
          },
          {
            "timestamp": "2026-04-25 06:57:21,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5225
          },
          {
            "timestamp": "2026-04-25 06:57:21,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5226
          },
          {
            "timestamp": "2026-04-25 06:57:21,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5227
          },
          {
            "timestamp": "2026-04-25 06:57:21,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5228
          },
          {
            "timestamp": "2026-04-25 06:57:21,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5229
          },
          {
            "timestamp": "2026-04-25 06:57:22,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5230
          },
          {
            "timestamp": "2026-04-25 06:57:22,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5231
          },
          {
            "timestamp": "2026-04-25 06:57:22,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5232
          },
          {
            "timestamp": "2026-04-25 06:57:22,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5233
          },
          {
            "timestamp": "2026-04-25 06:57:22,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5234
          },
          {
            "timestamp": "2026-04-25 06:57:22,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5235
          },
          {
            "timestamp": "2026-04-25 06:57:22,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5236
          },
          {
            "timestamp": "2026-04-25 06:57:22,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5237
          },
          {
            "timestamp": "2026-04-25 06:57:22,172",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5238
          },
          {
            "timestamp": "2026-04-25 06:57:22,172",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5239
          },
          {
            "timestamp": "2026-04-25 06:57:22,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5240
          },
          {
            "timestamp": "2026-04-25 06:57:22,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5241
          },
          {
            "timestamp": "2026-04-25 06:57:22,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5242
          },
          {
            "timestamp": "2026-04-25 06:57:22,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5243
          },
          {
            "timestamp": "2026-04-25 06:57:22,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5244
          },
          {
            "timestamp": "2026-04-25 06:57:22,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5245
          },
          {
            "timestamp": "2026-04-25 06:57:22,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5246
          },
          {
            "timestamp": "2026-04-25 06:57:22,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5247
          },
          {
            "timestamp": "2026-04-25 06:57:22,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5248
          },
          {
            "timestamp": "2026-04-25 06:57:22,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5249
          },
          {
            "timestamp": "2026-04-25 06:57:22,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5250
          },
          {
            "timestamp": "2026-04-25 06:57:22,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5251
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5252
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0676d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5253
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5254
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5255
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 5256
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5257
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000658",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1624"
              }
            ],
            "repeated": 0,
            "id": 5258
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1624"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 5259
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1624"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 5260
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 5261
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000658"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 5262
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1624"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 5263
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5264
          },
          {
            "timestamp": "2026-04-25 06:57:22,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5265
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5266
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5267
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5268
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1624"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 5269
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 5270
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 5271
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 5272
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 5273
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 5274
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1624"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 5275
          },
          {
            "timestamp": "2026-04-25 06:57:22,485",
            "thread_id": "7440",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1624"
              }
            ],
            "repeated": 0,
            "id": 5276
          },
          {
            "timestamp": "2026-04-25 06:57:22,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5277
          },
          {
            "timestamp": "2026-04-25 06:57:22,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5278
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "7440",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 5279
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "7440",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1624"
              }
            ],
            "repeated": 0,
            "id": 5280
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "7440",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 5281
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "7440",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 5282
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "7440",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 5283
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 5284
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5285
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5286
          },
          {
            "timestamp": "2026-04-25 06:57:22,516",
            "thread_id": "7440",
            "caller": "0x050759c3",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 9,
            "id": 5287
          },
          {
            "timestamp": "2026-04-25 06:57:22,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5288
          },
          {
            "timestamp": "2026-04-25 06:57:22,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5289
          },
          {
            "timestamp": "2026-04-25 06:57:22,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5290
          },
          {
            "timestamp": "2026-04-25 06:57:22,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5291
          },
          {
            "timestamp": "2026-04-25 06:57:22,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5292
          },
          {
            "timestamp": "2026-04-25 06:57:22,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5293
          },
          {
            "timestamp": "2026-04-25 06:57:22,657",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5294
          },
          {
            "timestamp": "2026-04-25 06:57:22,657",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5295
          },
          {
            "timestamp": "2026-04-25 06:57:22,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5296
          },
          {
            "timestamp": "2026-04-25 06:57:22,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5297
          },
          {
            "timestamp": "2026-04-25 06:57:22,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5298
          },
          {
            "timestamp": "2026-04-25 06:57:22,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5299
          },
          {
            "timestamp": "2026-04-25 06:57:22,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5300
          },
          {
            "timestamp": "2026-04-25 06:57:22,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5301
          },
          {
            "timestamp": "2026-04-25 06:57:22,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5302
          },
          {
            "timestamp": "2026-04-25 06:57:22,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5303
          },
          {
            "timestamp": "2026-04-25 06:57:22,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5304
          },
          {
            "timestamp": "2026-04-25 06:57:22,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5305
          },
          {
            "timestamp": "2026-04-25 06:57:22,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5306
          },
          {
            "timestamp": "2026-04-25 06:57:22,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5307
          },
          {
            "timestamp": "2026-04-25 06:57:22,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5308
          },
          {
            "timestamp": "2026-04-25 06:57:22,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 5309
          },
          {
            "timestamp": "2026-04-25 06:57:22,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5310
          },
          {
            "timestamp": "2026-04-25 06:57:22,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5311
          },
          {
            "timestamp": "2026-04-25 06:57:23,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5312
          },
          {
            "timestamp": "2026-04-25 06:57:23,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5313
          },
          {
            "timestamp": "2026-04-25 06:57:23,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5314
          },
          {
            "timestamp": "2026-04-25 06:57:23,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5315
          },
          {
            "timestamp": "2026-04-25 06:57:23,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5316
          },
          {
            "timestamp": "2026-04-25 06:57:23,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5317
          },
          {
            "timestamp": "2026-04-25 06:57:23,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5318
          },
          {
            "timestamp": "2026-04-25 06:57:23,172",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5319
          },
          {
            "timestamp": "2026-04-25 06:57:23,172",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5320
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "2616",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000668"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc27d8"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "6328"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 5321
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "2616",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x00000668",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc27d8"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "6328"
              }
            ],
            "repeated": 0,
            "id": 5322
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "2616",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000668"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "6328"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 5323
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5324
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5325
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5326
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00e45000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5327
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00e47000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5328
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e7138f",
            "parentcaller": "0x77e7110a",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000670"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000009",
                "pretty_value": "KEY_QUERY_VALUE|KEY_ENUMERATE_SUB_KEYS"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              }
            ],
            "repeated": 0,
            "id": 5329
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e713ac",
            "parentcaller": "0x77e7110a",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000670"
              },
              {
                "name": "ValueName",
                "value": "ResourcePolicies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies"
              }
            ],
            "repeated": 0,
            "id": 5330
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e713c2",
            "parentcaller": "0x77e7110a",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000670"
              }
            ],
            "repeated": 0,
            "id": 5331
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e6f04b",
            "parentcaller": "0x77e6ef40",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00008000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5332
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e6f092",
            "parentcaller": "0x77e6ef40",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08350000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5333
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02845000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5334
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02847000"
              },
              {
                "name": "RegionSize",
                "value": "0x00002000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5335
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e7138f",
            "parentcaller": "0x77e7110a",
            "category": "registry",
            "api": "NtOpenKey",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000670"
              },
              {
                "name": "DesiredAccess",
                "value": "0x00000009",
                "pretty_value": "KEY_QUERY_VALUE|KEY_ENUMERATE_SUB_KEYS"
              },
              {
                "name": "ObjectAttributesHandle",
                "value": "0x00000000"
              },
              {
                "name": "ObjectAttributesName",
                "value": "\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              },
              {
                "name": "ObjectAttributes",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager"
              }
            ],
            "repeated": 0,
            "id": 5336
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e713ac",
            "parentcaller": "0x77e7110a",
            "category": "registry",
            "api": "NtQueryValueKey",
            "status": false,
            "return": "0xffffffffc0000034",
            "pretty_return": "OBJECT_NAME_NOT_FOUND",
            "arguments": [
              {
                "name": "KeyHandle",
                "value": "0x00000670"
              },
              {
                "name": "ValueName",
                "value": "ResourcePolicies"
              },
              {
                "name": "FullName",
                "value": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies"
              }
            ],
            "repeated": 0,
            "id": 5337
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e713c2",
            "parentcaller": "0x77e7110a",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000670"
              }
            ],
            "repeated": 0,
            "id": 5338
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e6f04b",
            "parentcaller": "0x77e6ef40",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08990000"
              },
              {
                "name": "RegionSize",
                "value": "0x00008000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5339
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77e6f092",
            "parentcaller": "0x77e6ef40",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08990000"
              },
              {
                "name": "RegionSize",
                "value": "0x00001000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5340
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 5341
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5342
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 5343
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 5344
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08891000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5345
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5346
          },
          {
            "timestamp": "2026-04-25 06:57:23,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5347
          },
          {
            "timestamp": "2026-04-25 06:57:23,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5348
          },
          {
            "timestamp": "2026-04-25 06:57:23,235",
            "thread_id": "6328",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000668"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xb0t\\x00T\\x19\\x00\\x00\\xb8\\x18\\x00\\x00\\x03\\x00\\x00\\x00\t\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6328"
              }
            ],
            "repeated": 0,
            "id": 5349
          },
          {
            "timestamp": "2026-04-25 06:57:23,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5350
          },
          {
            "timestamp": "2026-04-25 06:57:23,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5351
          },
          {
            "timestamp": "2026-04-25 06:57:23,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5352
          },
          {
            "timestamp": "2026-04-25 06:57:23,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5353
          },
          {
            "timestamp": "2026-04-25 06:57:23,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5354
          },
          {
            "timestamp": "2026-04-25 06:57:23,297",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5355
          },
          {
            "timestamp": "2026-04-25 06:57:23,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5356
          },
          {
            "timestamp": "2026-04-25 06:57:23,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5357
          },
          {
            "timestamp": "2026-04-25 06:57:23,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5358
          },
          {
            "timestamp": "2026-04-25 06:57:23,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5359
          },
          {
            "timestamp": "2026-04-25 06:57:23,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5360
          },
          {
            "timestamp": "2026-04-25 06:57:23,360",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5361
          },
          {
            "timestamp": "2026-04-25 06:57:23,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5362
          },
          {
            "timestamp": "2026-04-25 06:57:23,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5363
          },
          {
            "timestamp": "2026-04-25 06:57:23,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5364
          },
          {
            "timestamp": "2026-04-25 06:57:23,422",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5365
          },
          {
            "timestamp": "2026-04-25 06:57:23,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5366
          },
          {
            "timestamp": "2026-04-25 06:57:23,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5367
          },
          {
            "timestamp": "2026-04-25 06:57:23,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5368
          },
          {
            "timestamp": "2026-04-25 06:57:23,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5369
          },
          {
            "timestamp": "2026-04-25 06:57:23,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5370
          },
          {
            "timestamp": "2026-04-25 06:57:23,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5371
          },
          {
            "timestamp": "2026-04-25 06:57:23,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5372
          },
          {
            "timestamp": "2026-04-25 06:57:23,485",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5373
          },
          {
            "timestamp": "2026-04-25 06:57:23,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5374
          },
          {
            "timestamp": "2026-04-25 06:57:23,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5375
          },
          {
            "timestamp": "2026-04-25 06:57:23,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5376
          },
          {
            "timestamp": "2026-04-25 06:57:23,547",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5377
          },
          {
            "timestamp": "2026-04-25 06:57:23,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5378
          },
          {
            "timestamp": "2026-04-25 06:57:23,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5379
          },
          {
            "timestamp": "2026-04-25 06:57:23,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5380
          },
          {
            "timestamp": "2026-04-25 06:57:23,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5381
          },
          {
            "timestamp": "2026-04-25 06:57:23,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5382
          },
          {
            "timestamp": "2026-04-25 06:57:23,610",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5383
          },
          {
            "timestamp": "2026-04-25 06:57:23,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5384
          },
          {
            "timestamp": "2026-04-25 06:57:23,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5385
          },
          {
            "timestamp": "2026-04-25 06:57:23,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5386
          },
          {
            "timestamp": "2026-04-25 06:57:23,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5387
          },
          {
            "timestamp": "2026-04-25 06:57:23,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5388
          },
          {
            "timestamp": "2026-04-25 06:57:23,672",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5389
          },
          {
            "timestamp": "2026-04-25 06:57:23,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5390
          },
          {
            "timestamp": "2026-04-25 06:57:23,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5391
          },
          {
            "timestamp": "2026-04-25 06:57:23,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5392
          },
          {
            "timestamp": "2026-04-25 06:57:23,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5393
          },
          {
            "timestamp": "2026-04-25 06:57:23,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5394
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5395
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5396
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5397
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5398
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5399
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5400
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5401
          },
          {
            "timestamp": "2026-04-25 06:57:23,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5402
          },
          {
            "timestamp": "2026-04-25 06:57:23,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5403
          },
          {
            "timestamp": "2026-04-25 06:57:23,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5404
          },
          {
            "timestamp": "2026-04-25 06:57:23,797",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5405
          },
          {
            "timestamp": "2026-04-25 06:57:23,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5406
          },
          {
            "timestamp": "2026-04-25 06:57:23,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5407
          },
          {
            "timestamp": "2026-04-25 06:57:23,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5408
          },
          {
            "timestamp": "2026-04-25 06:57:23,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5409
          },
          {
            "timestamp": "2026-04-25 06:57:23,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5410
          },
          {
            "timestamp": "2026-04-25 06:57:23,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5411
          },
          {
            "timestamp": "2026-04-25 06:57:23,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5412
          },
          {
            "timestamp": "2026-04-25 06:57:23,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5413
          },
          {
            "timestamp": "2026-04-25 06:57:23,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5414
          },
          {
            "timestamp": "2026-04-25 06:57:23,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5415
          },
          {
            "timestamp": "2026-04-25 06:57:23,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5416
          },
          {
            "timestamp": "2026-04-25 06:57:23,922",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5417
          },
          {
            "timestamp": "2026-04-25 06:57:23,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5418
          },
          {
            "timestamp": "2026-04-25 06:57:23,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5419
          },
          {
            "timestamp": "2026-04-25 06:57:23,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5420
          },
          {
            "timestamp": "2026-04-25 06:57:23,985",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5421
          },
          {
            "timestamp": "2026-04-25 06:57:23,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5422
          },
          {
            "timestamp": "2026-04-25 06:57:23,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5423
          },
          {
            "timestamp": "2026-04-25 06:57:23,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5424
          },
          {
            "timestamp": "2026-04-25 06:57:23,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5425
          },
          {
            "timestamp": "2026-04-25 06:57:23,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5426
          },
          {
            "timestamp": "2026-04-25 06:57:24,047",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5427
          },
          {
            "timestamp": "2026-04-25 06:57:24,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5428
          },
          {
            "timestamp": "2026-04-25 06:57:24,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5429
          },
          {
            "timestamp": "2026-04-25 06:57:24,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5430
          },
          {
            "timestamp": "2026-04-25 06:57:24,047",
            "thread_id": "1416",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05732000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5431
          },
          {
            "timestamp": "2026-04-25 06:57:24,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5432
          },
          {
            "timestamp": "2026-04-25 06:57:24,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5433
          },
          {
            "timestamp": "2026-04-25 06:57:24,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5434
          },
          {
            "timestamp": "2026-04-25 06:57:24,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5435
          },
          {
            "timestamp": "2026-04-25 06:57:24,110",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5436
          },
          {
            "timestamp": "2026-04-25 06:57:24,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5437
          },
          {
            "timestamp": "2026-04-25 06:57:24,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5438
          },
          {
            "timestamp": "2026-04-25 06:57:24,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5439
          },
          {
            "timestamp": "2026-04-25 06:57:24,172",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5440
          },
          {
            "timestamp": "2026-04-25 06:57:24,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5441
          },
          {
            "timestamp": "2026-04-25 06:57:24,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5442
          },
          {
            "timestamp": "2026-04-25 06:57:24,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5443
          },
          {
            "timestamp": "2026-04-25 06:57:24,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5444
          },
          {
            "timestamp": "2026-04-25 06:57:24,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5445
          },
          {
            "timestamp": "2026-04-25 06:57:24,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5446
          },
          {
            "timestamp": "2026-04-25 06:57:24,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5447
          },
          {
            "timestamp": "2026-04-25 06:57:24,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5448
          },
          {
            "timestamp": "2026-04-25 06:57:24,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5449
          },
          {
            "timestamp": "2026-04-25 06:57:24,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5450
          },
          {
            "timestamp": "2026-04-25 06:57:24,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5451
          },
          {
            "timestamp": "2026-04-25 06:57:24,251",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5452
          },
          {
            "timestamp": "2026-04-25 06:57:24,251",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5453
          },
          {
            "timestamp": "2026-04-25 06:57:24,297",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5454
          },
          {
            "timestamp": "2026-04-25 06:57:24,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5455
          },
          {
            "timestamp": "2026-04-25 06:57:24,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5456
          },
          {
            "timestamp": "2026-04-25 06:57:24,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5457
          },
          {
            "timestamp": "2026-04-25 06:57:24,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5458
          },
          {
            "timestamp": "2026-04-25 06:57:24,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5459
          },
          {
            "timestamp": "2026-04-25 06:57:24,360",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5460
          },
          {
            "timestamp": "2026-04-25 06:57:24,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5461
          },
          {
            "timestamp": "2026-04-25 06:57:24,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5462
          },
          {
            "timestamp": "2026-04-25 06:57:24,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5463
          },
          {
            "timestamp": "2026-04-25 06:57:24,422",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5464
          },
          {
            "timestamp": "2026-04-25 06:57:24,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5465
          },
          {
            "timestamp": "2026-04-25 06:57:24,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5466
          },
          {
            "timestamp": "2026-04-25 06:57:24,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5467
          },
          {
            "timestamp": "2026-04-25 06:57:24,485",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5468
          },
          {
            "timestamp": "2026-04-25 06:57:24,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5469
          },
          {
            "timestamp": "2026-04-25 06:57:24,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5470
          },
          {
            "timestamp": "2026-04-25 06:57:24,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5471
          },
          {
            "timestamp": "2026-04-25 06:57:24,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5472
          },
          {
            "timestamp": "2026-04-25 06:57:24,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5473
          },
          {
            "timestamp": "2026-04-25 06:57:24,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5474
          },
          {
            "timestamp": "2026-04-25 06:57:24,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5475
          },
          {
            "timestamp": "2026-04-25 06:57:24,610",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5476
          },
          {
            "timestamp": "2026-04-25 06:57:24,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5477
          },
          {
            "timestamp": "2026-04-25 06:57:24,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5478
          },
          {
            "timestamp": "2026-04-25 06:57:24,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5479
          },
          {
            "timestamp": "2026-04-25 06:57:24,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5480
          },
          {
            "timestamp": "2026-04-25 06:57:24,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5481
          },
          {
            "timestamp": "2026-04-25 06:57:24,672",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5482
          },
          {
            "timestamp": "2026-04-25 06:57:24,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5483
          },
          {
            "timestamp": "2026-04-25 06:57:24,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5484
          },
          {
            "timestamp": "2026-04-25 06:57:24,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5485
          },
          {
            "timestamp": "2026-04-25 06:57:24,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5486
          },
          {
            "timestamp": "2026-04-25 06:57:24,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5487
          },
          {
            "timestamp": "2026-04-25 06:57:24,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5488
          },
          {
            "timestamp": "2026-04-25 06:57:24,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5489
          },
          {
            "timestamp": "2026-04-25 06:57:24,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5490
          },
          {
            "timestamp": "2026-04-25 06:57:24,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5491
          },
          {
            "timestamp": "2026-04-25 06:57:24,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5492
          },
          {
            "timestamp": "2026-04-25 06:57:24,766",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5493
          },
          {
            "timestamp": "2026-04-25 06:57:24,766",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5494
          },
          {
            "timestamp": "2026-04-25 06:57:24,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5495
          },
          {
            "timestamp": "2026-04-25 06:57:24,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5496
          },
          {
            "timestamp": "2026-04-25 06:57:24,797",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5497
          },
          {
            "timestamp": "2026-04-25 06:57:24,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5498
          },
          {
            "timestamp": "2026-04-25 06:57:24,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5499
          },
          {
            "timestamp": "2026-04-25 06:57:24,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5500
          },
          {
            "timestamp": "2026-04-25 06:57:24,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5501
          },
          {
            "timestamp": "2026-04-25 06:57:24,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5502
          },
          {
            "timestamp": "2026-04-25 06:57:24,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5503
          },
          {
            "timestamp": "2026-04-25 06:57:24,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5504
          },
          {
            "timestamp": "2026-04-25 06:57:24,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5505
          },
          {
            "timestamp": "2026-04-25 06:57:24,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5506
          },
          {
            "timestamp": "2026-04-25 06:57:24,922",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5507
          },
          {
            "timestamp": "2026-04-25 06:57:24,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5508
          },
          {
            "timestamp": "2026-04-25 06:57:24,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5509
          },
          {
            "timestamp": "2026-04-25 06:57:24,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5510
          },
          {
            "timestamp": "2026-04-25 06:57:24,985",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5511
          },
          {
            "timestamp": "2026-04-25 06:57:24,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5512
          },
          {
            "timestamp": "2026-04-25 06:57:24,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5513
          },
          {
            "timestamp": "2026-04-25 06:57:24,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5514
          },
          {
            "timestamp": "2026-04-25 06:57:24,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5515
          },
          {
            "timestamp": "2026-04-25 06:57:25,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5516
          },
          {
            "timestamp": "2026-04-25 06:57:25,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5517
          },
          {
            "timestamp": "2026-04-25 06:57:25,047",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5518
          },
          {
            "timestamp": "2026-04-25 06:57:25,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5519
          },
          {
            "timestamp": "2026-04-25 06:57:25,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5520
          },
          {
            "timestamp": "2026-04-25 06:57:25,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5521
          },
          {
            "timestamp": "2026-04-25 06:57:25,110",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5522
          },
          {
            "timestamp": "2026-04-25 06:57:25,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5523
          },
          {
            "timestamp": "2026-04-25 06:57:25,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5524
          },
          {
            "timestamp": "2026-04-25 06:57:25,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5525
          },
          {
            "timestamp": "2026-04-25 06:57:25,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5526
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5527
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5528
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5529
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5530
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5531
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5532
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5533
          },
          {
            "timestamp": "2026-04-25 06:57:25,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5534
          },
          {
            "timestamp": "2026-04-25 06:57:25,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5535
          },
          {
            "timestamp": "2026-04-25 06:57:25,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5536
          },
          {
            "timestamp": "2026-04-25 06:57:25,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5537
          },
          {
            "timestamp": "2026-04-25 06:57:25,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5538
          },
          {
            "timestamp": "2026-04-25 06:57:25,282",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5539
          },
          {
            "timestamp": "2026-04-25 06:57:25,282",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5540
          },
          {
            "timestamp": "2026-04-25 06:57:25,297",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5541
          },
          {
            "timestamp": "2026-04-25 06:57:25,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5542
          },
          {
            "timestamp": "2026-04-25 06:57:25,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5543
          },
          {
            "timestamp": "2026-04-25 06:57:25,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5544
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x7385b070",
            "parentcaller": "0x7385b08b",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "16"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "2660"
              }
            ],
            "repeated": 0,
            "id": 5545
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x7726978d",
            "parentcaller": "0x76acf564",
            "category": "system",
            "api": "LdrGetProcedureAddressForCaller",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ModuleName",
                "value": "ole32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x77060000"
              },
              {
                "name": "FunctionName",
                "value": "CoUninitialize"
              },
              {
                "name": "Ordinal",
                "value": "0"
              },
              {
                "name": "FunctionAddress",
                "value": "0x77bfd120"
              }
            ],
            "repeated": 0,
            "id": 5546
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x7726074f",
            "parentcaller": "0x77bfbb70",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "oleaut32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76060000"
              }
            ],
            "repeated": 0,
            "id": 5547
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x77e8ff5f",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77d97000"
              },
              {
                "name": "ModuleName",
                "value": "combase.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5548
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x77e8ff94",
            "parentcaller": "0x77e8fe54",
            "category": "process",
            "api": "NtProtectVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x77d97000"
              },
              {
                "name": "ModuleName",
                "value": "combase.dll"
              },
              {
                "name": "NumberOfBytesProtected",
                "value": "0x00001000"
              },
              {
                "name": "MemoryType",
                "value": "0x00000000"
              },
              {
                "name": "NewAccessProtection",
                "value": "0x00000002",
                "pretty_value": "PAGE_READONLY"
              },
              {
                "name": "OldAccessProtection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5549
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x77eab5a6",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "2660"
              }
            ],
            "repeated": 0,
            "id": 5550
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x747cad94",
            "parentcaller": "0x747ca15c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005fc"
              }
            ],
            "repeated": 0,
            "id": 5551
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 5552
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x774e45ae",
            "parentcaller": "0x774e442c",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 5553
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x7726269a",
            "parentcaller": "0x76645041",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000060c"
              }
            ],
            "repeated": 0,
            "id": 5554
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000618"
              }
            ],
            "repeated": 0,
            "id": 5555
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000614"
              }
            ],
            "repeated": 0,
            "id": 5556
          },
          {
            "timestamp": "2026-04-25 06:57:25,329",
            "thread_id": "2660",
            "caller": "0x77eab5c9",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 5557
          },
          {
            "timestamp": "2026-04-25 06:57:25,360",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5558
          },
          {
            "timestamp": "2026-04-25 06:57:25,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5559
          },
          {
            "timestamp": "2026-04-25 06:57:25,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5560
          },
          {
            "timestamp": "2026-04-25 06:57:25,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5561
          },
          {
            "timestamp": "2026-04-25 06:57:25,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5562
          },
          {
            "timestamp": "2026-04-25 06:57:25,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5563
          },
          {
            "timestamp": "2026-04-25 06:57:25,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5564
          },
          {
            "timestamp": "2026-04-25 06:57:25,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5565
          },
          {
            "timestamp": "2026-04-25 06:57:25,422",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5566
          },
          {
            "timestamp": "2026-04-25 06:57:25,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5567
          },
          {
            "timestamp": "2026-04-25 06:57:25,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5568
          },
          {
            "timestamp": "2026-04-25 06:57:25,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5569
          },
          {
            "timestamp": "2026-04-25 06:57:25,485",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5570
          },
          {
            "timestamp": "2026-04-25 06:57:25,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5571
          },
          {
            "timestamp": "2026-04-25 06:57:25,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5572
          },
          {
            "timestamp": "2026-04-25 06:57:25,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5573
          },
          {
            "timestamp": "2026-04-25 06:57:25,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5574
          },
          {
            "timestamp": "2026-04-25 06:57:25,547",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5575
          },
          {
            "timestamp": "2026-04-25 06:57:25,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5576
          },
          {
            "timestamp": "2026-04-25 06:57:25,610",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5577
          },
          {
            "timestamp": "2026-04-25 06:57:25,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5578
          },
          {
            "timestamp": "2026-04-25 06:57:25,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5579
          },
          {
            "timestamp": "2026-04-25 06:57:25,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5580
          },
          {
            "timestamp": "2026-04-25 06:57:25,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5581
          },
          {
            "timestamp": "2026-04-25 06:57:25,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5582
          },
          {
            "timestamp": "2026-04-25 06:57:25,672",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5583
          },
          {
            "timestamp": "2026-04-25 06:57:25,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5584
          },
          {
            "timestamp": "2026-04-25 06:57:25,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5585
          },
          {
            "timestamp": "2026-04-25 06:57:25,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5586
          },
          {
            "timestamp": "2026-04-25 06:57:25,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5587
          },
          {
            "timestamp": "2026-04-25 06:57:25,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5588
          },
          {
            "timestamp": "2026-04-25 06:57:25,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5589
          },
          {
            "timestamp": "2026-04-25 06:57:25,735",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5590
          },
          {
            "timestamp": "2026-04-25 06:57:25,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5591
          },
          {
            "timestamp": "2026-04-25 06:57:25,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5592
          },
          {
            "timestamp": "2026-04-25 06:57:25,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5593
          },
          {
            "timestamp": "2026-04-25 06:57:25,797",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5594
          },
          {
            "timestamp": "2026-04-25 06:57:25,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5595
          },
          {
            "timestamp": "2026-04-25 06:57:25,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5596
          },
          {
            "timestamp": "2026-04-25 06:57:25,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5597
          },
          {
            "timestamp": "2026-04-25 06:57:25,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5598
          },
          {
            "timestamp": "2026-04-25 06:57:25,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5599
          },
          {
            "timestamp": "2026-04-25 06:57:25,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5600
          },
          {
            "timestamp": "2026-04-25 06:57:25,860",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5601
          },
          {
            "timestamp": "2026-04-25 06:57:25,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5602
          },
          {
            "timestamp": "2026-04-25 06:57:25,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5603
          },
          {
            "timestamp": "2026-04-25 06:57:25,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5604
          },
          {
            "timestamp": "2026-04-25 06:57:25,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5605
          },
          {
            "timestamp": "2026-04-25 06:57:25,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5606
          },
          {
            "timestamp": "2026-04-25 06:57:25,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5607
          },
          {
            "timestamp": "2026-04-25 06:57:25,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5608
          },
          {
            "timestamp": "2026-04-25 06:57:26,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5609
          },
          {
            "timestamp": "2026-04-25 06:57:26,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5610
          },
          {
            "timestamp": "2026-04-25 06:57:26,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5611
          },
          {
            "timestamp": "2026-04-25 06:57:26,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5612
          },
          {
            "timestamp": "2026-04-25 06:57:26,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5613
          },
          {
            "timestamp": "2026-04-25 06:57:26,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5614
          },
          {
            "timestamp": "2026-04-25 06:57:26,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5615
          },
          {
            "timestamp": "2026-04-25 06:57:26,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5616
          },
          {
            "timestamp": "2026-04-25 06:57:26,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5617
          },
          {
            "timestamp": "2026-04-25 06:57:26,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5618
          },
          {
            "timestamp": "2026-04-25 06:57:26,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5619
          },
          {
            "timestamp": "2026-04-25 06:57:26,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5620
          },
          {
            "timestamp": "2026-04-25 06:57:26,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "46"
              }
            ],
            "repeated": 0,
            "id": 5621
          },
          {
            "timestamp": "2026-04-25 06:57:26,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5622
          },
          {
            "timestamp": "2026-04-25 06:57:26,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5623
          },
          {
            "timestamp": "2026-04-25 06:57:26,172",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5624
          },
          {
            "timestamp": "2026-04-25 06:57:26,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5625
          },
          {
            "timestamp": "2026-04-25 06:57:26,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4"
              }
            ],
            "repeated": 0,
            "id": 5626
          },
          {
            "timestamp": "2026-04-25 06:57:26,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5627
          },
          {
            "timestamp": "2026-04-25 06:57:26,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5628
          },
          {
            "timestamp": "2026-04-25 06:57:26,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5629
          },
          {
            "timestamp": "2026-04-25 06:57:26,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5630
          },
          {
            "timestamp": "2026-04-25 06:57:26,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5631
          },
          {
            "timestamp": "2026-04-25 06:57:26,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5632
          },
          {
            "timestamp": "2026-04-25 06:57:26,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5633
          },
          {
            "timestamp": "2026-04-25 06:57:26,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5634
          },
          {
            "timestamp": "2026-04-25 06:57:26,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5635
          },
          {
            "timestamp": "2026-04-25 06:57:26,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5636
          },
          {
            "timestamp": "2026-04-25 06:57:26,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5637
          },
          {
            "timestamp": "2026-04-25 06:57:26,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5638
          },
          {
            "timestamp": "2026-04-25 06:57:26,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5639
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5640
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5641
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5642
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5643
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5644
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5645
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5646
          },
          {
            "timestamp": "2026-04-25 06:57:26,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5647
          },
          {
            "timestamp": "2026-04-25 06:57:26,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5648
          },
          {
            "timestamp": "2026-04-25 06:57:26,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5649
          },
          {
            "timestamp": "2026-04-25 06:57:26,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5650
          },
          {
            "timestamp": "2026-04-25 06:57:26,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5651
          },
          {
            "timestamp": "2026-04-25 06:57:26,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5652
          },
          {
            "timestamp": "2026-04-25 06:57:26,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5653
          },
          {
            "timestamp": "2026-04-25 06:57:26,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5654
          },
          {
            "timestamp": "2026-04-25 06:57:26,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5655
          },
          {
            "timestamp": "2026-04-25 06:57:26,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5656
          },
          {
            "timestamp": "2026-04-25 06:57:26,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5657
          },
          {
            "timestamp": "2026-04-25 06:57:26,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5658
          },
          {
            "timestamp": "2026-04-25 06:57:26,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5659
          },
          {
            "timestamp": "2026-04-25 06:57:26,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5660
          },
          {
            "timestamp": "2026-04-25 06:57:26,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5661
          },
          {
            "timestamp": "2026-04-25 06:57:26,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5662
          },
          {
            "timestamp": "2026-04-25 06:57:26,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5663
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5664
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0678d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5665
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5666
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5667
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5668
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5669
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 5670
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5671
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000005f8",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1528"
              }
            ],
            "repeated": 0,
            "id": 5672
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 5673
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 5674
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 5675
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5676
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5677
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000005f8"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 5678
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 5679
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5680
          },
          {
            "timestamp": "2026-04-25 06:57:26,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5681
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 5682
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 5683
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 5684
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 5685
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 5686
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 5687
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1528"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 5688
          },
          {
            "timestamp": "2026-04-25 06:57:26,547",
            "thread_id": "7440",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              }
            ],
            "repeated": 0,
            "id": 5689
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5690
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5691
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5692
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5693
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5694
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5695
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5696
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5697
          },
          {
            "timestamp": "2026-04-25 06:57:26,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5698
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "7440",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 5699
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "7440",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1528"
              }
            ],
            "repeated": 0,
            "id": 5700
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "7440",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 5701
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "7440",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 5702
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "7440",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5703
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5704
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 5705
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "7440",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 5706
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5707
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5708
          },
          {
            "timestamp": "2026-04-25 06:57:26,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5709
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000600"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2648"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "5976"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 5710
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x00000600",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2648"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "5976"
              }
            ],
            "repeated": 0,
            "id": 5711
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "3116",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000600"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "5976"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 5712
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "5976",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00e49000"
              },
              {
                "name": "RegionSize",
                "value": "0x00006000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5713
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "5976",
            "caller": "0x77e80857",
            "parentcaller": "0x77e8055f",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x02849000"
              },
              {
                "name": "RegionSize",
                "value": "0x00006000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5714
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "5976",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 5715
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "5976",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5716
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "5976",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 5717
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "5976",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 5718
          },
          {
            "timestamp": "2026-04-25 06:57:26,610",
            "thread_id": "5976",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00b11000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5719
          },
          {
            "timestamp": "2026-04-25 06:57:26,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5720
          },
          {
            "timestamp": "2026-04-25 06:57:26,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5721
          },
          {
            "timestamp": "2026-04-25 06:57:26,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5722
          },
          {
            "timestamp": "2026-04-25 06:57:26,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5723
          },
          {
            "timestamp": "2026-04-25 06:57:26,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5724
          },
          {
            "timestamp": "2026-04-25 06:57:26,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5725
          },
          {
            "timestamp": "2026-04-25 06:57:26,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5726
          },
          {
            "timestamp": "2026-04-25 06:57:26,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5727
          },
          {
            "timestamp": "2026-04-25 06:57:26,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5728
          },
          {
            "timestamp": "2026-04-25 06:57:26,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5729
          },
          {
            "timestamp": "2026-04-25 06:57:26,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5730
          },
          {
            "timestamp": "2026-04-25 06:57:26,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5731
          },
          {
            "timestamp": "2026-04-25 06:57:26,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5732
          },
          {
            "timestamp": "2026-04-25 06:57:26,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5733
          },
          {
            "timestamp": "2026-04-25 06:57:26,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5734
          },
          {
            "timestamp": "2026-04-25 06:57:26,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5735
          },
          {
            "timestamp": "2026-04-25 06:57:26,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5736
          },
          {
            "timestamp": "2026-04-25 06:57:26,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5737
          },
          {
            "timestamp": "2026-04-25 06:57:26,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5738
          },
          {
            "timestamp": "2026-04-25 06:57:26,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5739
          },
          {
            "timestamp": "2026-04-25 06:57:26,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5740
          },
          {
            "timestamp": "2026-04-25 06:57:26,829",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5741
          },
          {
            "timestamp": "2026-04-25 06:57:26,829",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5742
          },
          {
            "timestamp": "2026-04-25 06:57:26,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5743
          },
          {
            "timestamp": "2026-04-25 06:57:26,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5744
          },
          {
            "timestamp": "2026-04-25 06:57:26,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5745
          },
          {
            "timestamp": "2026-04-25 06:57:26,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5746
          },
          {
            "timestamp": "2026-04-25 06:57:26,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5747
          },
          {
            "timestamp": "2026-04-25 06:57:26,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5748
          },
          {
            "timestamp": "2026-04-25 06:57:26,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5749
          },
          {
            "timestamp": "2026-04-25 06:57:26,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5750
          },
          {
            "timestamp": "2026-04-25 06:57:26,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5751
          },
          {
            "timestamp": "2026-04-25 06:57:26,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5752
          },
          {
            "timestamp": "2026-04-25 06:57:27,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5753
          },
          {
            "timestamp": "2026-04-25 06:57:27,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5754
          },
          {
            "timestamp": "2026-04-25 06:57:27,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5755
          },
          {
            "timestamp": "2026-04-25 06:57:27,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5756
          },
          {
            "timestamp": "2026-04-25 06:57:27,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5757
          },
          {
            "timestamp": "2026-04-25 06:57:27,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5758
          },
          {
            "timestamp": "2026-04-25 06:57:27,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5759
          },
          {
            "timestamp": "2026-04-25 06:57:27,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5760
          },
          {
            "timestamp": "2026-04-25 06:57:27,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5761
          },
          {
            "timestamp": "2026-04-25 06:57:27,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5762
          },
          {
            "timestamp": "2026-04-25 06:57:27,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5763
          },
          {
            "timestamp": "2026-04-25 06:57:27,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5764
          },
          {
            "timestamp": "2026-04-25 06:57:27,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5765
          },
          {
            "timestamp": "2026-04-25 06:57:27,188",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5766
          },
          {
            "timestamp": "2026-04-25 06:57:27,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5767
          },
          {
            "timestamp": "2026-04-25 06:57:27,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5768
          },
          {
            "timestamp": "2026-04-25 06:57:27,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5769
          },
          {
            "timestamp": "2026-04-25 06:57:27,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5770
          },
          {
            "timestamp": "2026-04-25 06:57:27,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5771
          },
          {
            "timestamp": "2026-04-25 06:57:27,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5772
          },
          {
            "timestamp": "2026-04-25 06:57:27,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5773
          },
          {
            "timestamp": "2026-04-25 06:57:27,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5774
          },
          {
            "timestamp": "2026-04-25 06:57:27,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5775
          },
          {
            "timestamp": "2026-04-25 06:57:27,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5776
          },
          {
            "timestamp": "2026-04-25 06:57:27,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5777
          },
          {
            "timestamp": "2026-04-25 06:57:27,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5778
          },
          {
            "timestamp": "2026-04-25 06:57:27,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5779
          },
          {
            "timestamp": "2026-04-25 06:57:27,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5780
          },
          {
            "timestamp": "2026-04-25 06:57:27,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5781
          },
          {
            "timestamp": "2026-04-25 06:57:27,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5782
          },
          {
            "timestamp": "2026-04-25 06:57:27,344",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5783
          },
          {
            "timestamp": "2026-04-25 06:57:27,344",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5784
          },
          {
            "timestamp": "2026-04-25 06:57:27,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5785
          },
          {
            "timestamp": "2026-04-25 06:57:27,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5786
          },
          {
            "timestamp": "2026-04-25 06:57:27,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5787
          },
          {
            "timestamp": "2026-04-25 06:57:27,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5788
          },
          {
            "timestamp": "2026-04-25 06:57:27,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5789
          },
          {
            "timestamp": "2026-04-25 06:57:27,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5790
          },
          {
            "timestamp": "2026-04-25 06:57:27,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5791
          },
          {
            "timestamp": "2026-04-25 06:57:27,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5792
          },
          {
            "timestamp": "2026-04-25 06:57:27,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5793
          },
          {
            "timestamp": "2026-04-25 06:57:27,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5794
          },
          {
            "timestamp": "2026-04-25 06:57:27,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5795
          },
          {
            "timestamp": "2026-04-25 06:57:27,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5796
          },
          {
            "timestamp": "2026-04-25 06:57:27,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5797
          },
          {
            "timestamp": "2026-04-25 06:57:27,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5798
          },
          {
            "timestamp": "2026-04-25 06:57:27,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5799
          },
          {
            "timestamp": "2026-04-25 06:57:27,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5800
          },
          {
            "timestamp": "2026-04-25 06:57:27,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5801
          },
          {
            "timestamp": "2026-04-25 06:57:27,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5802
          },
          {
            "timestamp": "2026-04-25 06:57:27,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5803
          },
          {
            "timestamp": "2026-04-25 06:57:27,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5804
          },
          {
            "timestamp": "2026-04-25 06:57:27,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5805
          },
          {
            "timestamp": "2026-04-25 06:57:27,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5806
          },
          {
            "timestamp": "2026-04-25 06:57:27,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5807
          },
          {
            "timestamp": "2026-04-25 06:57:27,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5808
          },
          {
            "timestamp": "2026-04-25 06:57:27,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5809
          },
          {
            "timestamp": "2026-04-25 06:57:27,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5810
          },
          {
            "timestamp": "2026-04-25 06:57:27,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5811
          },
          {
            "timestamp": "2026-04-25 06:57:27,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5812
          },
          {
            "timestamp": "2026-04-25 06:57:27,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5813
          },
          {
            "timestamp": "2026-04-25 06:57:27,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5814
          },
          {
            "timestamp": "2026-04-25 06:57:27,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5815
          },
          {
            "timestamp": "2026-04-25 06:57:27,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5816
          },
          {
            "timestamp": "2026-04-25 06:57:27,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5817
          },
          {
            "timestamp": "2026-04-25 06:57:27,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5818
          },
          {
            "timestamp": "2026-04-25 06:57:27,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5819
          },
          {
            "timestamp": "2026-04-25 06:57:27,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5820
          },
          {
            "timestamp": "2026-04-25 06:57:27,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5821
          },
          {
            "timestamp": "2026-04-25 06:57:27,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5822
          },
          {
            "timestamp": "2026-04-25 06:57:27,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5823
          },
          {
            "timestamp": "2026-04-25 06:57:27,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5824
          },
          {
            "timestamp": "2026-04-25 06:57:27,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5825
          },
          {
            "timestamp": "2026-04-25 06:57:27,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5826
          },
          {
            "timestamp": "2026-04-25 06:57:27,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5827
          },
          {
            "timestamp": "2026-04-25 06:57:27,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5828
          },
          {
            "timestamp": "2026-04-25 06:57:27,860",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5829
          },
          {
            "timestamp": "2026-04-25 06:57:27,860",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5830
          },
          {
            "timestamp": "2026-04-25 06:57:27,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5831
          },
          {
            "timestamp": "2026-04-25 06:57:27,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5832
          },
          {
            "timestamp": "2026-04-25 06:57:27,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5833
          },
          {
            "timestamp": "2026-04-25 06:57:27,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5834
          },
          {
            "timestamp": "2026-04-25 06:57:27,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5835
          },
          {
            "timestamp": "2026-04-25 06:57:27,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5836
          },
          {
            "timestamp": "2026-04-25 06:57:27,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5837
          },
          {
            "timestamp": "2026-04-25 06:57:27,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5838
          },
          {
            "timestamp": "2026-04-25 06:57:27,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5839
          },
          {
            "timestamp": "2026-04-25 06:57:27,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5840
          },
          {
            "timestamp": "2026-04-25 06:57:28,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5841
          },
          {
            "timestamp": "2026-04-25 06:57:28,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5842
          },
          {
            "timestamp": "2026-04-25 06:57:28,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5843
          },
          {
            "timestamp": "2026-04-25 06:57:28,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5844
          },
          {
            "timestamp": "2026-04-25 06:57:28,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5845
          },
          {
            "timestamp": "2026-04-25 06:57:28,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5846
          },
          {
            "timestamp": "2026-04-25 06:57:28,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5847
          },
          {
            "timestamp": "2026-04-25 06:57:28,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5848
          },
          {
            "timestamp": "2026-04-25 06:57:28,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5849
          },
          {
            "timestamp": "2026-04-25 06:57:28,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5850
          },
          {
            "timestamp": "2026-04-25 06:57:28,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5851
          },
          {
            "timestamp": "2026-04-25 06:57:28,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5852
          },
          {
            "timestamp": "2026-04-25 06:57:28,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5853
          },
          {
            "timestamp": "2026-04-25 06:57:28,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5854
          },
          {
            "timestamp": "2026-04-25 06:57:28,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5855
          },
          {
            "timestamp": "2026-04-25 06:57:28,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5856
          },
          {
            "timestamp": "2026-04-25 06:57:28,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5857
          },
          {
            "timestamp": "2026-04-25 06:57:28,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5858
          },
          {
            "timestamp": "2026-04-25 06:57:28,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5859
          },
          {
            "timestamp": "2026-04-25 06:57:28,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5860
          },
          {
            "timestamp": "2026-04-25 06:57:28,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5861
          },
          {
            "timestamp": "2026-04-25 06:57:28,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5862
          },
          {
            "timestamp": "2026-04-25 06:57:28,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5863
          },
          {
            "timestamp": "2026-04-25 06:57:28,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5864
          },
          {
            "timestamp": "2026-04-25 06:57:28,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5865
          },
          {
            "timestamp": "2026-04-25 06:57:28,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5866
          },
          {
            "timestamp": "2026-04-25 06:57:28,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5867
          },
          {
            "timestamp": "2026-04-25 06:57:28,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5868
          },
          {
            "timestamp": "2026-04-25 06:57:28,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5869
          },
          {
            "timestamp": "2026-04-25 06:57:28,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5870
          },
          {
            "timestamp": "2026-04-25 06:57:28,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5871
          },
          {
            "timestamp": "2026-04-25 06:57:28,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5872
          },
          {
            "timestamp": "2026-04-25 06:57:28,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5873
          },
          {
            "timestamp": "2026-04-25 06:57:28,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5874
          },
          {
            "timestamp": "2026-04-25 06:57:28,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5875
          },
          {
            "timestamp": "2026-04-25 06:57:28,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5876
          },
          {
            "timestamp": "2026-04-25 06:57:28,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5877
          },
          {
            "timestamp": "2026-04-25 06:57:28,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5878
          },
          {
            "timestamp": "2026-04-25 06:57:28,376",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5879
          },
          {
            "timestamp": "2026-04-25 06:57:28,376",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5880
          },
          {
            "timestamp": "2026-04-25 06:57:28,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5881
          },
          {
            "timestamp": "2026-04-25 06:57:28,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5882
          },
          {
            "timestamp": "2026-04-25 06:57:28,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5883
          },
          {
            "timestamp": "2026-04-25 06:57:28,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5884
          },
          {
            "timestamp": "2026-04-25 06:57:28,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5885
          },
          {
            "timestamp": "2026-04-25 06:57:28,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5886
          },
          {
            "timestamp": "2026-04-25 06:57:28,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5887
          },
          {
            "timestamp": "2026-04-25 06:57:28,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5888
          },
          {
            "timestamp": "2026-04-25 06:57:28,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5889
          },
          {
            "timestamp": "2026-04-25 06:57:28,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5890
          },
          {
            "timestamp": "2026-04-25 06:57:28,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5891
          },
          {
            "timestamp": "2026-04-25 06:57:28,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5892
          },
          {
            "timestamp": "2026-04-25 06:57:28,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5893
          },
          {
            "timestamp": "2026-04-25 06:57:28,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5894
          },
          {
            "timestamp": "2026-04-25 06:57:28,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5895
          },
          {
            "timestamp": "2026-04-25 06:57:28,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5896
          },
          {
            "timestamp": "2026-04-25 06:57:28,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5897
          },
          {
            "timestamp": "2026-04-25 06:57:28,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5898
          },
          {
            "timestamp": "2026-04-25 06:57:28,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5899
          },
          {
            "timestamp": "2026-04-25 06:57:28,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5900
          },
          {
            "timestamp": "2026-04-25 06:57:28,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5901
          },
          {
            "timestamp": "2026-04-25 06:57:28,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5902
          },
          {
            "timestamp": "2026-04-25 06:57:28,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5903
          },
          {
            "timestamp": "2026-04-25 06:57:28,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5904
          },
          {
            "timestamp": "2026-04-25 06:57:28,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5905
          },
          {
            "timestamp": "2026-04-25 06:57:28,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5906
          },
          {
            "timestamp": "2026-04-25 06:57:28,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5907
          },
          {
            "timestamp": "2026-04-25 06:57:28,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5908
          },
          {
            "timestamp": "2026-04-25 06:57:28,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5909
          },
          {
            "timestamp": "2026-04-25 06:57:28,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5910
          },
          {
            "timestamp": "2026-04-25 06:57:28,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5911
          },
          {
            "timestamp": "2026-04-25 06:57:28,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5912
          },
          {
            "timestamp": "2026-04-25 06:57:28,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5913
          },
          {
            "timestamp": "2026-04-25 06:57:28,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5914
          },
          {
            "timestamp": "2026-04-25 06:57:28,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5915
          },
          {
            "timestamp": "2026-04-25 06:57:28,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5916
          },
          {
            "timestamp": "2026-04-25 06:57:28,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5917
          },
          {
            "timestamp": "2026-04-25 06:57:28,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5918
          },
          {
            "timestamp": "2026-04-25 06:57:28,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5919
          },
          {
            "timestamp": "2026-04-25 06:57:28,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5920
          },
          {
            "timestamp": "2026-04-25 06:57:28,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5921
          },
          {
            "timestamp": "2026-04-25 06:57:28,891",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5922
          },
          {
            "timestamp": "2026-04-25 06:57:28,891",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5923
          },
          {
            "timestamp": "2026-04-25 06:57:28,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5924
          },
          {
            "timestamp": "2026-04-25 06:57:28,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5925
          },
          {
            "timestamp": "2026-04-25 06:57:28,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5926
          },
          {
            "timestamp": "2026-04-25 06:57:28,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5927
          },
          {
            "timestamp": "2026-04-25 06:57:28,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5928
          },
          {
            "timestamp": "2026-04-25 06:57:28,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5929
          },
          {
            "timestamp": "2026-04-25 06:57:29,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5930
          },
          {
            "timestamp": "2026-04-25 06:57:29,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5931
          },
          {
            "timestamp": "2026-04-25 06:57:29,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5932
          },
          {
            "timestamp": "2026-04-25 06:57:29,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5933
          },
          {
            "timestamp": "2026-04-25 06:57:29,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5934
          },
          {
            "timestamp": "2026-04-25 06:57:29,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5935
          },
          {
            "timestamp": "2026-04-25 06:57:29,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5936
          },
          {
            "timestamp": "2026-04-25 06:57:29,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5937
          },
          {
            "timestamp": "2026-04-25 06:57:29,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5938
          },
          {
            "timestamp": "2026-04-25 06:57:29,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5939
          },
          {
            "timestamp": "2026-04-25 06:57:29,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5940
          },
          {
            "timestamp": "2026-04-25 06:57:29,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5941
          },
          {
            "timestamp": "2026-04-25 06:57:29,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5942
          },
          {
            "timestamp": "2026-04-25 06:57:29,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 5943
          },
          {
            "timestamp": "2026-04-25 06:57:29,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5944
          },
          {
            "timestamp": "2026-04-25 06:57:29,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5945
          },
          {
            "timestamp": "2026-04-25 06:57:29,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5946
          },
          {
            "timestamp": "2026-04-25 06:57:29,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5947
          },
          {
            "timestamp": "2026-04-25 06:57:29,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5948
          },
          {
            "timestamp": "2026-04-25 06:57:29,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5949
          },
          {
            "timestamp": "2026-04-25 06:57:29,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5950
          },
          {
            "timestamp": "2026-04-25 06:57:29,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5951
          },
          {
            "timestamp": "2026-04-25 06:57:29,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5952
          },
          {
            "timestamp": "2026-04-25 06:57:29,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5953
          },
          {
            "timestamp": "2026-04-25 06:57:29,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5954
          },
          {
            "timestamp": "2026-04-25 06:57:29,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5955
          },
          {
            "timestamp": "2026-04-25 06:57:29,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5956
          },
          {
            "timestamp": "2026-04-25 06:57:29,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5957
          },
          {
            "timestamp": "2026-04-25 06:57:29,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5958
          },
          {
            "timestamp": "2026-04-25 06:57:29,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5959
          },
          {
            "timestamp": "2026-04-25 06:57:29,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5960
          },
          {
            "timestamp": "2026-04-25 06:57:29,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5961
          },
          {
            "timestamp": "2026-04-25 06:57:29,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5962
          },
          {
            "timestamp": "2026-04-25 06:57:29,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5963
          },
          {
            "timestamp": "2026-04-25 06:57:29,407",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 5964
          },
          {
            "timestamp": "2026-04-25 06:57:29,407",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 5965
          },
          {
            "timestamp": "2026-04-25 06:57:29,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5966
          },
          {
            "timestamp": "2026-04-25 06:57:29,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5967
          },
          {
            "timestamp": "2026-04-25 06:57:29,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5968
          },
          {
            "timestamp": "2026-04-25 06:57:29,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5969
          },
          {
            "timestamp": "2026-04-25 06:57:29,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5970
          },
          {
            "timestamp": "2026-04-25 06:57:29,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5971
          },
          {
            "timestamp": "2026-04-25 06:57:29,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5972
          },
          {
            "timestamp": "2026-04-25 06:57:29,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5973
          },
          {
            "timestamp": "2026-04-25 06:57:29,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5974
          },
          {
            "timestamp": "2026-04-25 06:57:29,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5975
          },
          {
            "timestamp": "2026-04-25 06:57:29,563",
            "thread_id": "6328",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05742000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 5976
          },
          {
            "timestamp": "2026-04-25 06:57:29,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5977
          },
          {
            "timestamp": "2026-04-25 06:57:29,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5978
          },
          {
            "timestamp": "2026-04-25 06:57:29,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5979
          },
          {
            "timestamp": "2026-04-25 06:57:29,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5980
          },
          {
            "timestamp": "2026-04-25 06:57:29,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5981
          },
          {
            "timestamp": "2026-04-25 06:57:29,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5982
          },
          {
            "timestamp": "2026-04-25 06:57:29,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5983
          },
          {
            "timestamp": "2026-04-25 06:57:29,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5984
          },
          {
            "timestamp": "2026-04-25 06:57:29,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5985
          },
          {
            "timestamp": "2026-04-25 06:57:29,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5986
          },
          {
            "timestamp": "2026-04-25 06:57:29,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 5987
          },
          {
            "timestamp": "2026-04-25 06:57:29,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5988
          },
          {
            "timestamp": "2026-04-25 06:57:29,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5989
          },
          {
            "timestamp": "2026-04-25 06:57:29,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5990
          },
          {
            "timestamp": "2026-04-25 06:57:29,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5991
          },
          {
            "timestamp": "2026-04-25 06:57:29,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5992
          },
          {
            "timestamp": "2026-04-25 06:57:29,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5993
          },
          {
            "timestamp": "2026-04-25 06:57:29,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5994
          },
          {
            "timestamp": "2026-04-25 06:57:29,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5995
          },
          {
            "timestamp": "2026-04-25 06:57:29,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5996
          },
          {
            "timestamp": "2026-04-25 06:57:29,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 5997
          },
          {
            "timestamp": "2026-04-25 06:57:29,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 5998
          },
          {
            "timestamp": "2026-04-25 06:57:29,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 5999
          },
          {
            "timestamp": "2026-04-25 06:57:29,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6000
          },
          {
            "timestamp": "2026-04-25 06:57:29,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6001
          },
          {
            "timestamp": "2026-04-25 06:57:29,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6002
          },
          {
            "timestamp": "2026-04-25 06:57:29,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6003
          },
          {
            "timestamp": "2026-04-25 06:57:29,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6004
          },
          {
            "timestamp": "2026-04-25 06:57:29,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6005
          },
          {
            "timestamp": "2026-04-25 06:57:29,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6006
          },
          {
            "timestamp": "2026-04-25 06:57:29,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6007
          },
          {
            "timestamp": "2026-04-25 06:57:29,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6008
          },
          {
            "timestamp": "2026-04-25 06:57:29,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6009
          },
          {
            "timestamp": "2026-04-25 06:57:29,922",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6010
          },
          {
            "timestamp": "2026-04-25 06:57:29,922",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6011
          },
          {
            "timestamp": "2026-04-25 06:57:29,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6012
          },
          {
            "timestamp": "2026-04-25 06:57:29,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6013
          },
          {
            "timestamp": "2026-04-25 06:57:29,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6014
          },
          {
            "timestamp": "2026-04-25 06:57:29,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6015
          },
          {
            "timestamp": "2026-04-25 06:57:29,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6016
          },
          {
            "timestamp": "2026-04-25 06:57:30,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6017
          },
          {
            "timestamp": "2026-04-25 06:57:30,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6018
          },
          {
            "timestamp": "2026-04-25 06:57:30,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6019
          },
          {
            "timestamp": "2026-04-25 06:57:30,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6020
          },
          {
            "timestamp": "2026-04-25 06:57:30,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6021
          },
          {
            "timestamp": "2026-04-25 06:57:30,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6022
          },
          {
            "timestamp": "2026-04-25 06:57:30,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6023
          },
          {
            "timestamp": "2026-04-25 06:57:30,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6024
          },
          {
            "timestamp": "2026-04-25 06:57:30,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6025
          },
          {
            "timestamp": "2026-04-25 06:57:30,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6026
          },
          {
            "timestamp": "2026-04-25 06:57:30,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6027
          },
          {
            "timestamp": "2026-04-25 06:57:30,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6028
          },
          {
            "timestamp": "2026-04-25 06:57:30,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6029
          },
          {
            "timestamp": "2026-04-25 06:57:30,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6030
          },
          {
            "timestamp": "2026-04-25 06:57:30,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6031
          },
          {
            "timestamp": "2026-04-25 06:57:30,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6032
          },
          {
            "timestamp": "2026-04-25 06:57:30,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6033
          },
          {
            "timestamp": "2026-04-25 06:57:30,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6034
          },
          {
            "timestamp": "2026-04-25 06:57:30,188",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6035
          },
          {
            "timestamp": "2026-04-25 06:57:30,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6036
          },
          {
            "timestamp": "2026-04-25 06:57:30,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6037
          },
          {
            "timestamp": "2026-04-25 06:57:30,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6038
          },
          {
            "timestamp": "2026-04-25 06:57:30,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6039
          },
          {
            "timestamp": "2026-04-25 06:57:30,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6040
          },
          {
            "timestamp": "2026-04-25 06:57:30,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6041
          },
          {
            "timestamp": "2026-04-25 06:57:30,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6042
          },
          {
            "timestamp": "2026-04-25 06:57:30,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6043
          },
          {
            "timestamp": "2026-04-25 06:57:30,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6044
          },
          {
            "timestamp": "2026-04-25 06:57:30,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6045
          },
          {
            "timestamp": "2026-04-25 06:57:30,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6046
          },
          {
            "timestamp": "2026-04-25 06:57:30,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6047
          },
          {
            "timestamp": "2026-04-25 06:57:30,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6048
          },
          {
            "timestamp": "2026-04-25 06:57:30,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6049
          },
          {
            "timestamp": "2026-04-25 06:57:30,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6050
          },
          {
            "timestamp": "2026-04-25 06:57:30,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6051
          },
          {
            "timestamp": "2026-04-25 06:57:30,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6052
          },
          {
            "timestamp": "2026-04-25 06:57:30,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6053
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6054
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6055
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6056
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6057
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6058
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6059
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6060
          },
          {
            "timestamp": "2026-04-25 06:57:30,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6061
          },
          {
            "timestamp": "2026-04-25 06:57:30,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6062
          },
          {
            "timestamp": "2026-04-25 06:57:30,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6063
          },
          {
            "timestamp": "2026-04-25 06:57:30,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6064
          },
          {
            "timestamp": "2026-04-25 06:57:30,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6065
          },
          {
            "timestamp": "2026-04-25 06:57:30,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6066
          },
          {
            "timestamp": "2026-04-25 06:57:30,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6067
          },
          {
            "timestamp": "2026-04-25 06:57:30,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6068
          },
          {
            "timestamp": "2026-04-25 06:57:30,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6069
          },
          {
            "timestamp": "2026-04-25 06:57:30,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6070
          },
          {
            "timestamp": "2026-04-25 06:57:30,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6071
          },
          {
            "timestamp": "2026-04-25 06:57:30,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6072
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6073
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x067ad000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 6074
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6075
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6076
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6077
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6078
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 6079
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6080
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000698",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1688"
              }
            ],
            "repeated": 0,
            "id": 6081
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 6082
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 6083
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 6084
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6085
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000698"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 6086
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6087
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6088
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 6089
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6090
          },
          {
            "timestamp": "2026-04-25 06:57:30,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6091
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 6092
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000600"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xe0t\\x00T\\x19\\x00\\x00X\\x17\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "5976"
              }
            ],
            "repeated": 0,
            "id": 6093
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 6094
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 6095
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 6096
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 6097
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 6098
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1688"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 6099
          },
          {
            "timestamp": "2026-04-25 06:57:30,610",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              }
            ],
            "repeated": 0,
            "id": 6100
          },
          {
            "timestamp": "2026-04-25 06:57:30,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6101
          },
          {
            "timestamp": "2026-04-25 06:57:30,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6102
          },
          {
            "timestamp": "2026-04-25 06:57:30,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6103
          },
          {
            "timestamp": "2026-04-25 06:57:30,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6104
          },
          {
            "timestamp": "2026-04-25 06:57:30,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6105
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 6106
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              }
            ],
            "repeated": 0,
            "id": 6107
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 6108
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 6109
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6110
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6111
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 6112
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6113
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6114
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6115
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6116
          },
          {
            "timestamp": "2026-04-25 06:57:30,641",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 6117
          },
          {
            "timestamp": "2026-04-25 06:57:30,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6118
          },
          {
            "timestamp": "2026-04-25 06:57:30,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6119
          },
          {
            "timestamp": "2026-04-25 06:57:30,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6120
          },
          {
            "timestamp": "2026-04-25 06:57:30,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6121
          },
          {
            "timestamp": "2026-04-25 06:57:30,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6122
          },
          {
            "timestamp": "2026-04-25 06:57:30,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6123
          },
          {
            "timestamp": "2026-04-25 06:57:30,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6124
          },
          {
            "timestamp": "2026-04-25 06:57:30,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6125
          },
          {
            "timestamp": "2026-04-25 06:57:30,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6126
          },
          {
            "timestamp": "2026-04-25 06:57:30,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6127
          },
          {
            "timestamp": "2026-04-25 06:57:30,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6128
          },
          {
            "timestamp": "2026-04-25 06:57:30,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6129
          },
          {
            "timestamp": "2026-04-25 06:57:30,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6130
          },
          {
            "timestamp": "2026-04-25 06:57:30,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6131
          },
          {
            "timestamp": "2026-04-25 06:57:30,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6132
          },
          {
            "timestamp": "2026-04-25 06:57:30,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6133
          },
          {
            "timestamp": "2026-04-25 06:57:30,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6134
          },
          {
            "timestamp": "2026-04-25 06:57:30,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6135
          },
          {
            "timestamp": "2026-04-25 06:57:30,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6136
          },
          {
            "timestamp": "2026-04-25 06:57:30,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6137
          },
          {
            "timestamp": "2026-04-25 06:57:30,938",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6138
          },
          {
            "timestamp": "2026-04-25 06:57:30,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6139
          },
          {
            "timestamp": "2026-04-25 06:57:30,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6140
          },
          {
            "timestamp": "2026-04-25 06:57:30,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6141
          },
          {
            "timestamp": "2026-04-25 06:57:30,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6142
          },
          {
            "timestamp": "2026-04-25 06:57:30,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6143
          },
          {
            "timestamp": "2026-04-25 06:57:30,954",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6144
          },
          {
            "timestamp": "2026-04-25 06:57:30,954",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6145
          },
          {
            "timestamp": "2026-04-25 06:57:31,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6146
          },
          {
            "timestamp": "2026-04-25 06:57:31,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6147
          },
          {
            "timestamp": "2026-04-25 06:57:31,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6148
          },
          {
            "timestamp": "2026-04-25 06:57:31,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6149
          },
          {
            "timestamp": "2026-04-25 06:57:31,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6150
          },
          {
            "timestamp": "2026-04-25 06:57:31,063",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6151
          },
          {
            "timestamp": "2026-04-25 06:57:31,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6152
          },
          {
            "timestamp": "2026-04-25 06:57:31,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6153
          },
          {
            "timestamp": "2026-04-25 06:57:31,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6154
          },
          {
            "timestamp": "2026-04-25 06:57:31,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6155
          },
          {
            "timestamp": "2026-04-25 06:57:31,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6156
          },
          {
            "timestamp": "2026-04-25 06:57:31,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6157
          },
          {
            "timestamp": "2026-04-25 06:57:31,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6158
          },
          {
            "timestamp": "2026-04-25 06:57:31,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6159
          },
          {
            "timestamp": "2026-04-25 06:57:31,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6160
          },
          {
            "timestamp": "2026-04-25 06:57:31,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6161
          },
          {
            "timestamp": "2026-04-25 06:57:31,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6162
          },
          {
            "timestamp": "2026-04-25 06:57:31,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6163
          },
          {
            "timestamp": "2026-04-25 06:57:31,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6164
          },
          {
            "timestamp": "2026-04-25 06:57:31,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6165
          },
          {
            "timestamp": "2026-04-25 06:57:31,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6166
          },
          {
            "timestamp": "2026-04-25 06:57:31,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6167
          },
          {
            "timestamp": "2026-04-25 06:57:31,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6168
          },
          {
            "timestamp": "2026-04-25 06:57:31,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6169
          },
          {
            "timestamp": "2026-04-25 06:57:31,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6170
          },
          {
            "timestamp": "2026-04-25 06:57:31,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6171
          },
          {
            "timestamp": "2026-04-25 06:57:31,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6172
          },
          {
            "timestamp": "2026-04-25 06:57:31,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6173
          },
          {
            "timestamp": "2026-04-25 06:57:31,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6174
          },
          {
            "timestamp": "2026-04-25 06:57:31,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6175
          },
          {
            "timestamp": "2026-04-25 06:57:31,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6176
          },
          {
            "timestamp": "2026-04-25 06:57:31,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6177
          },
          {
            "timestamp": "2026-04-25 06:57:31,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6178
          },
          {
            "timestamp": "2026-04-25 06:57:31,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6179
          },
          {
            "timestamp": "2026-04-25 06:57:31,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6180
          },
          {
            "timestamp": "2026-04-25 06:57:31,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6181
          },
          {
            "timestamp": "2026-04-25 06:57:31,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6182
          },
          {
            "timestamp": "2026-04-25 06:57:31,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6183
          },
          {
            "timestamp": "2026-04-25 06:57:31,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6184
          },
          {
            "timestamp": "2026-04-25 06:57:31,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6185
          },
          {
            "timestamp": "2026-04-25 06:57:31,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6186
          },
          {
            "timestamp": "2026-04-25 06:57:31,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6187
          },
          {
            "timestamp": "2026-04-25 06:57:31,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6188
          },
          {
            "timestamp": "2026-04-25 06:57:31,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6189
          },
          {
            "timestamp": "2026-04-25 06:57:31,469",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6190
          },
          {
            "timestamp": "2026-04-25 06:57:31,469",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6191
          },
          {
            "timestamp": "2026-04-25 06:57:31,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6192
          },
          {
            "timestamp": "2026-04-25 06:57:31,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6193
          },
          {
            "timestamp": "2026-04-25 06:57:31,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6194
          },
          {
            "timestamp": "2026-04-25 06:57:31,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6195
          },
          {
            "timestamp": "2026-04-25 06:57:31,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6196
          },
          {
            "timestamp": "2026-04-25 06:57:31,563",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6197
          },
          {
            "timestamp": "2026-04-25 06:57:31,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6198
          },
          {
            "timestamp": "2026-04-25 06:57:31,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6199
          },
          {
            "timestamp": "2026-04-25 06:57:31,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6200
          },
          {
            "timestamp": "2026-04-25 06:57:31,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6201
          },
          {
            "timestamp": "2026-04-25 06:57:31,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6202
          },
          {
            "timestamp": "2026-04-25 06:57:31,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6203
          },
          {
            "timestamp": "2026-04-25 06:57:31,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6204
          },
          {
            "timestamp": "2026-04-25 06:57:31,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6205
          },
          {
            "timestamp": "2026-04-25 06:57:31,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6206
          },
          {
            "timestamp": "2026-04-25 06:57:31,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6207
          },
          {
            "timestamp": "2026-04-25 06:57:31,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6208
          },
          {
            "timestamp": "2026-04-25 06:57:31,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6209
          },
          {
            "timestamp": "2026-04-25 06:57:31,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6210
          },
          {
            "timestamp": "2026-04-25 06:57:31,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6211
          },
          {
            "timestamp": "2026-04-25 06:57:31,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6212
          },
          {
            "timestamp": "2026-04-25 06:57:31,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6213
          },
          {
            "timestamp": "2026-04-25 06:57:31,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6214
          },
          {
            "timestamp": "2026-04-25 06:57:31,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6215
          },
          {
            "timestamp": "2026-04-25 06:57:31,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6216
          },
          {
            "timestamp": "2026-04-25 06:57:31,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6217
          },
          {
            "timestamp": "2026-04-25 06:57:31,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6218
          },
          {
            "timestamp": "2026-04-25 06:57:31,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6219
          },
          {
            "timestamp": "2026-04-25 06:57:31,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6220
          },
          {
            "timestamp": "2026-04-25 06:57:31,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6221
          },
          {
            "timestamp": "2026-04-25 06:57:31,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6222
          },
          {
            "timestamp": "2026-04-25 06:57:31,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6223
          },
          {
            "timestamp": "2026-04-25 06:57:31,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6224
          },
          {
            "timestamp": "2026-04-25 06:57:31,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6225
          },
          {
            "timestamp": "2026-04-25 06:57:31,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6226
          },
          {
            "timestamp": "2026-04-25 06:57:31,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6227
          },
          {
            "timestamp": "2026-04-25 06:57:31,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6228
          },
          {
            "timestamp": "2026-04-25 06:57:31,938",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6229
          },
          {
            "timestamp": "2026-04-25 06:57:31,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6230
          },
          {
            "timestamp": "2026-04-25 06:57:31,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6231
          },
          {
            "timestamp": "2026-04-25 06:57:31,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6232
          },
          {
            "timestamp": "2026-04-25 06:57:31,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6233
          },
          {
            "timestamp": "2026-04-25 06:57:31,985",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6234
          },
          {
            "timestamp": "2026-04-25 06:57:31,985",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6235
          },
          {
            "timestamp": "2026-04-25 06:57:32,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6236
          },
          {
            "timestamp": "2026-04-25 06:57:32,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6237
          },
          {
            "timestamp": "2026-04-25 06:57:32,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6238
          },
          {
            "timestamp": "2026-04-25 06:57:32,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6239
          },
          {
            "timestamp": "2026-04-25 06:57:32,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6240
          },
          {
            "timestamp": "2026-04-25 06:57:32,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6241
          },
          {
            "timestamp": "2026-04-25 06:57:32,063",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6242
          },
          {
            "timestamp": "2026-04-25 06:57:32,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6243
          },
          {
            "timestamp": "2026-04-25 06:57:32,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6244
          },
          {
            "timestamp": "2026-04-25 06:57:32,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6245
          },
          {
            "timestamp": "2026-04-25 06:57:32,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6246
          },
          {
            "timestamp": "2026-04-25 06:57:32,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6247
          },
          {
            "timestamp": "2026-04-25 06:57:32,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6248
          },
          {
            "timestamp": "2026-04-25 06:57:32,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6249
          },
          {
            "timestamp": "2026-04-25 06:57:32,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6250
          },
          {
            "timestamp": "2026-04-25 06:57:32,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6251
          },
          {
            "timestamp": "2026-04-25 06:57:32,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6252
          },
          {
            "timestamp": "2026-04-25 06:57:32,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6253
          },
          {
            "timestamp": "2026-04-25 06:57:32,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6254
          },
          {
            "timestamp": "2026-04-25 06:57:32,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6255
          },
          {
            "timestamp": "2026-04-25 06:57:32,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6256
          },
          {
            "timestamp": "2026-04-25 06:57:32,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6257
          },
          {
            "timestamp": "2026-04-25 06:57:32,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6258
          },
          {
            "timestamp": "2026-04-25 06:57:32,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6259
          },
          {
            "timestamp": "2026-04-25 06:57:32,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6260
          },
          {
            "timestamp": "2026-04-25 06:57:32,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6261
          },
          {
            "timestamp": "2026-04-25 06:57:32,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6262
          },
          {
            "timestamp": "2026-04-25 06:57:32,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6263
          },
          {
            "timestamp": "2026-04-25 06:57:32,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6264
          },
          {
            "timestamp": "2026-04-25 06:57:32,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6265
          },
          {
            "timestamp": "2026-04-25 06:57:32,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6266
          },
          {
            "timestamp": "2026-04-25 06:57:32,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6267
          },
          {
            "timestamp": "2026-04-25 06:57:32,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6268
          },
          {
            "timestamp": "2026-04-25 06:57:32,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6269
          },
          {
            "timestamp": "2026-04-25 06:57:32,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6270
          },
          {
            "timestamp": "2026-04-25 06:57:32,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6271
          },
          {
            "timestamp": "2026-04-25 06:57:32,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6272
          },
          {
            "timestamp": "2026-04-25 06:57:32,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6273
          },
          {
            "timestamp": "2026-04-25 06:57:32,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6274
          },
          {
            "timestamp": "2026-04-25 06:57:32,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6275
          },
          {
            "timestamp": "2026-04-25 06:57:32,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6276
          },
          {
            "timestamp": "2026-04-25 06:57:32,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6277
          },
          {
            "timestamp": "2026-04-25 06:57:32,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6278
          },
          {
            "timestamp": "2026-04-25 06:57:32,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6279
          },
          {
            "timestamp": "2026-04-25 06:57:32,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6280
          },
          {
            "timestamp": "2026-04-25 06:57:32,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6281
          },
          {
            "timestamp": "2026-04-25 06:57:32,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6282
          },
          {
            "timestamp": "2026-04-25 06:57:32,501",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6283
          },
          {
            "timestamp": "2026-04-25 06:57:32,501",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6284
          },
          {
            "timestamp": "2026-04-25 06:57:32,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6285
          },
          {
            "timestamp": "2026-04-25 06:57:32,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6286
          },
          {
            "timestamp": "2026-04-25 06:57:32,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6287
          },
          {
            "timestamp": "2026-04-25 06:57:32,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6288
          },
          {
            "timestamp": "2026-04-25 06:57:32,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6289
          },
          {
            "timestamp": "2026-04-25 06:57:32,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6290
          },
          {
            "timestamp": "2026-04-25 06:57:32,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6291
          },
          {
            "timestamp": "2026-04-25 06:57:32,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6292
          },
          {
            "timestamp": "2026-04-25 06:57:32,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6293
          },
          {
            "timestamp": "2026-04-25 06:57:32,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6294
          },
          {
            "timestamp": "2026-04-25 06:57:32,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6295
          },
          {
            "timestamp": "2026-04-25 06:57:32,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6296
          },
          {
            "timestamp": "2026-04-25 06:57:32,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6297
          },
          {
            "timestamp": "2026-04-25 06:57:32,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6298
          },
          {
            "timestamp": "2026-04-25 06:57:32,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6299
          },
          {
            "timestamp": "2026-04-25 06:57:32,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6300
          },
          {
            "timestamp": "2026-04-25 06:57:32,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6301
          },
          {
            "timestamp": "2026-04-25 06:57:32,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6302
          },
          {
            "timestamp": "2026-04-25 06:57:32,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6303
          },
          {
            "timestamp": "2026-04-25 06:57:32,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6304
          },
          {
            "timestamp": "2026-04-25 06:57:32,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6305
          },
          {
            "timestamp": "2026-04-25 06:57:32,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6306
          },
          {
            "timestamp": "2026-04-25 06:57:32,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6307
          },
          {
            "timestamp": "2026-04-25 06:57:32,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6308
          },
          {
            "timestamp": "2026-04-25 06:57:32,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6309
          },
          {
            "timestamp": "2026-04-25 06:57:32,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6310
          },
          {
            "timestamp": "2026-04-25 06:57:32,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6311
          },
          {
            "timestamp": "2026-04-25 06:57:32,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6312
          },
          {
            "timestamp": "2026-04-25 06:57:32,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6313
          },
          {
            "timestamp": "2026-04-25 06:57:32,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6314
          },
          {
            "timestamp": "2026-04-25 06:57:32,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6315
          },
          {
            "timestamp": "2026-04-25 06:57:32,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6316
          },
          {
            "timestamp": "2026-04-25 06:57:32,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6317
          },
          {
            "timestamp": "2026-04-25 06:57:32,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6318
          },
          {
            "timestamp": "2026-04-25 06:57:32,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6319
          },
          {
            "timestamp": "2026-04-25 06:57:32,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6320
          },
          {
            "timestamp": "2026-04-25 06:57:32,938",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6321
          },
          {
            "timestamp": "2026-04-25 06:57:32,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6322
          },
          {
            "timestamp": "2026-04-25 06:57:32,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6323
          },
          {
            "timestamp": "2026-04-25 06:57:32,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6324
          },
          {
            "timestamp": "2026-04-25 06:57:33,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6325
          },
          {
            "timestamp": "2026-04-25 06:57:33,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6326
          },
          {
            "timestamp": "2026-04-25 06:57:33,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6327
          },
          {
            "timestamp": "2026-04-25 06:57:33,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6328
          },
          {
            "timestamp": "2026-04-25 06:57:33,016",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6329
          },
          {
            "timestamp": "2026-04-25 06:57:33,016",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6330
          },
          {
            "timestamp": "2026-04-25 06:57:33,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6331
          },
          {
            "timestamp": "2026-04-25 06:57:33,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6332
          },
          {
            "timestamp": "2026-04-25 06:57:33,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6333
          },
          {
            "timestamp": "2026-04-25 06:57:33,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6334
          },
          {
            "timestamp": "2026-04-25 06:57:33,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6335
          },
          {
            "timestamp": "2026-04-25 06:57:33,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6336
          },
          {
            "timestamp": "2026-04-25 06:57:33,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6337
          },
          {
            "timestamp": "2026-04-25 06:57:33,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6338
          },
          {
            "timestamp": "2026-04-25 06:57:33,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6339
          },
          {
            "timestamp": "2026-04-25 06:57:33,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6340
          },
          {
            "timestamp": "2026-04-25 06:57:33,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6341
          },
          {
            "timestamp": "2026-04-25 06:57:33,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6342
          },
          {
            "timestamp": "2026-04-25 06:57:33,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6343
          },
          {
            "timestamp": "2026-04-25 06:57:33,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6344
          },
          {
            "timestamp": "2026-04-25 06:57:33,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6345
          },
          {
            "timestamp": "2026-04-25 06:57:33,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6346
          },
          {
            "timestamp": "2026-04-25 06:57:33,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6347
          },
          {
            "timestamp": "2026-04-25 06:57:33,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6348
          },
          {
            "timestamp": "2026-04-25 06:57:33,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6349
          },
          {
            "timestamp": "2026-04-25 06:57:33,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6350
          },
          {
            "timestamp": "2026-04-25 06:57:33,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6351
          },
          {
            "timestamp": "2026-04-25 06:57:33,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6352
          },
          {
            "timestamp": "2026-04-25 06:57:33,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6353
          },
          {
            "timestamp": "2026-04-25 06:57:33,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6354
          },
          {
            "timestamp": "2026-04-25 06:57:33,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6355
          },
          {
            "timestamp": "2026-04-25 06:57:33,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6356
          },
          {
            "timestamp": "2026-04-25 06:57:33,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6357
          },
          {
            "timestamp": "2026-04-25 06:57:33,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6358
          },
          {
            "timestamp": "2026-04-25 06:57:33,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6359
          },
          {
            "timestamp": "2026-04-25 06:57:33,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6360
          },
          {
            "timestamp": "2026-04-25 06:57:33,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6361
          },
          {
            "timestamp": "2026-04-25 06:57:33,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6362
          },
          {
            "timestamp": "2026-04-25 06:57:33,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6363
          },
          {
            "timestamp": "2026-04-25 06:57:33,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6364
          },
          {
            "timestamp": "2026-04-25 06:57:33,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6365
          },
          {
            "timestamp": "2026-04-25 06:57:33,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6366
          },
          {
            "timestamp": "2026-04-25 06:57:33,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6367
          },
          {
            "timestamp": "2026-04-25 06:57:33,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6368
          },
          {
            "timestamp": "2026-04-25 06:57:33,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6369
          },
          {
            "timestamp": "2026-04-25 06:57:33,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6370
          },
          {
            "timestamp": "2026-04-25 06:57:33,532",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6371
          },
          {
            "timestamp": "2026-04-25 06:57:33,532",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6372
          },
          {
            "timestamp": "2026-04-25 06:57:33,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6373
          },
          {
            "timestamp": "2026-04-25 06:57:33,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6374
          },
          {
            "timestamp": "2026-04-25 06:57:33,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6375
          },
          {
            "timestamp": "2026-04-25 06:57:33,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6376
          },
          {
            "timestamp": "2026-04-25 06:57:33,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6377
          },
          {
            "timestamp": "2026-04-25 06:57:33,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6378
          },
          {
            "timestamp": "2026-04-25 06:57:33,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6379
          },
          {
            "timestamp": "2026-04-25 06:57:33,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6380
          },
          {
            "timestamp": "2026-04-25 06:57:33,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6381
          },
          {
            "timestamp": "2026-04-25 06:57:33,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6382
          },
          {
            "timestamp": "2026-04-25 06:57:33,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6383
          },
          {
            "timestamp": "2026-04-25 06:57:33,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6384
          },
          {
            "timestamp": "2026-04-25 06:57:33,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6385
          },
          {
            "timestamp": "2026-04-25 06:57:33,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6386
          },
          {
            "timestamp": "2026-04-25 06:57:33,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6387
          },
          {
            "timestamp": "2026-04-25 06:57:33,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6388
          },
          {
            "timestamp": "2026-04-25 06:57:33,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6389
          },
          {
            "timestamp": "2026-04-25 06:57:33,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6390
          },
          {
            "timestamp": "2026-04-25 06:57:33,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6391
          },
          {
            "timestamp": "2026-04-25 06:57:33,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6392
          },
          {
            "timestamp": "2026-04-25 06:57:33,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6393
          },
          {
            "timestamp": "2026-04-25 06:57:33,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6394
          },
          {
            "timestamp": "2026-04-25 06:57:33,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6395
          },
          {
            "timestamp": "2026-04-25 06:57:33,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6396
          },
          {
            "timestamp": "2026-04-25 06:57:33,813",
            "thread_id": "6948",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05752000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 6397
          },
          {
            "timestamp": "2026-04-25 06:57:33,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6398
          },
          {
            "timestamp": "2026-04-25 06:57:33,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6399
          },
          {
            "timestamp": "2026-04-25 06:57:33,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6400
          },
          {
            "timestamp": "2026-04-25 06:57:33,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6401
          },
          {
            "timestamp": "2026-04-25 06:57:33,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6402
          },
          {
            "timestamp": "2026-04-25 06:57:33,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6403
          },
          {
            "timestamp": "2026-04-25 06:57:33,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6404
          },
          {
            "timestamp": "2026-04-25 06:57:33,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6405
          },
          {
            "timestamp": "2026-04-25 06:57:33,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6406
          },
          {
            "timestamp": "2026-04-25 06:57:33,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6407
          },
          {
            "timestamp": "2026-04-25 06:57:33,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6408
          },
          {
            "timestamp": "2026-04-25 06:57:33,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6409
          },
          {
            "timestamp": "2026-04-25 06:57:33,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6410
          },
          {
            "timestamp": "2026-04-25 06:57:33,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6411
          },
          {
            "timestamp": "2026-04-25 06:57:33,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6412
          },
          {
            "timestamp": "2026-04-25 06:57:33,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6413
          },
          {
            "timestamp": "2026-04-25 06:57:33,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6414
          },
          {
            "timestamp": "2026-04-25 06:57:33,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6415
          },
          {
            "timestamp": "2026-04-25 06:57:34,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6416
          },
          {
            "timestamp": "2026-04-25 06:57:34,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6417
          },
          {
            "timestamp": "2026-04-25 06:57:34,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6418
          },
          {
            "timestamp": "2026-04-25 06:57:34,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6419
          },
          {
            "timestamp": "2026-04-25 06:57:34,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6420
          },
          {
            "timestamp": "2026-04-25 06:57:34,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6421
          },
          {
            "timestamp": "2026-04-25 06:57:34,047",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6422
          },
          {
            "timestamp": "2026-04-25 06:57:34,047",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6423
          },
          {
            "timestamp": "2026-04-25 06:57:34,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6424
          },
          {
            "timestamp": "2026-04-25 06:57:34,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6425
          },
          {
            "timestamp": "2026-04-25 06:57:34,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6426
          },
          {
            "timestamp": "2026-04-25 06:57:34,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6427
          },
          {
            "timestamp": "2026-04-25 06:57:34,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6428
          },
          {
            "timestamp": "2026-04-25 06:57:34,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6429
          },
          {
            "timestamp": "2026-04-25 06:57:34,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6430
          },
          {
            "timestamp": "2026-04-25 06:57:34,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6431
          },
          {
            "timestamp": "2026-04-25 06:57:34,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6432
          },
          {
            "timestamp": "2026-04-25 06:57:34,188",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6433
          },
          {
            "timestamp": "2026-04-25 06:57:34,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6434
          },
          {
            "timestamp": "2026-04-25 06:57:34,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6435
          },
          {
            "timestamp": "2026-04-25 06:57:34,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6436
          },
          {
            "timestamp": "2026-04-25 06:57:34,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6437
          },
          {
            "timestamp": "2026-04-25 06:57:34,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6438
          },
          {
            "timestamp": "2026-04-25 06:57:34,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6439
          },
          {
            "timestamp": "2026-04-25 06:57:34,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6440
          },
          {
            "timestamp": "2026-04-25 06:57:34,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6441
          },
          {
            "timestamp": "2026-04-25 06:57:34,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6442
          },
          {
            "timestamp": "2026-04-25 06:57:34,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6443
          },
          {
            "timestamp": "2026-04-25 06:57:34,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6444
          },
          {
            "timestamp": "2026-04-25 06:57:34,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6445
          },
          {
            "timestamp": "2026-04-25 06:57:34,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6446
          },
          {
            "timestamp": "2026-04-25 06:57:34,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6447
          },
          {
            "timestamp": "2026-04-25 06:57:34,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6448
          },
          {
            "timestamp": "2026-04-25 06:57:34,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6449
          },
          {
            "timestamp": "2026-04-25 06:57:34,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6450
          },
          {
            "timestamp": "2026-04-25 06:57:34,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6451
          },
          {
            "timestamp": "2026-04-25 06:57:34,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6452
          },
          {
            "timestamp": "2026-04-25 06:57:34,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6453
          },
          {
            "timestamp": "2026-04-25 06:57:34,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6454
          },
          {
            "timestamp": "2026-04-25 06:57:34,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6455
          },
          {
            "timestamp": "2026-04-25 06:57:34,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6456
          },
          {
            "timestamp": "2026-04-25 06:57:34,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6457
          },
          {
            "timestamp": "2026-04-25 06:57:34,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6458
          },
          {
            "timestamp": "2026-04-25 06:57:34,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6459
          },
          {
            "timestamp": "2026-04-25 06:57:34,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6460
          },
          {
            "timestamp": "2026-04-25 06:57:34,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6461
          },
          {
            "timestamp": "2026-04-25 06:57:34,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6462
          },
          {
            "timestamp": "2026-04-25 06:57:34,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6463
          },
          {
            "timestamp": "2026-04-25 06:57:34,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6464
          },
          {
            "timestamp": "2026-04-25 06:57:34,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6465
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6466
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6467
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6468
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6469
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6470
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6471
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6472
          },
          {
            "timestamp": "2026-04-25 06:57:34,563",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6473
          },
          {
            "timestamp": "2026-04-25 06:57:34,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6474
          },
          {
            "timestamp": "2026-04-25 06:57:34,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6475
          },
          {
            "timestamp": "2026-04-25 06:57:34,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6476
          },
          {
            "timestamp": "2026-04-25 06:57:34,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6477
          },
          {
            "timestamp": "2026-04-25 06:57:34,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6478
          },
          {
            "timestamp": "2026-04-25 06:57:34,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6479
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6480
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x067cd000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 6481
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6482
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6483
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6484
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6485
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 6486
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6487
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000618",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1560"
              }
            ],
            "repeated": 0,
            "id": 6488
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1560"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 6489
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1560"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 6490
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 6491
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6492
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6493
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000618"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 6494
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1560"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 6495
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6496
          },
          {
            "timestamp": "2026-04-25 06:57:34,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6497
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1560"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 6498
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 6499
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 6500
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 6501
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 6502
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 6503
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1560"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 6504
          },
          {
            "timestamp": "2026-04-25 06:57:34,672",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1560"
              }
            ],
            "repeated": 0,
            "id": 6505
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6506
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6507
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6508
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6509
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6510
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6511
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6512
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6513
          },
          {
            "timestamp": "2026-04-25 06:57:34,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6514
          },
          {
            "timestamp": "2026-04-25 06:57:34,704",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 6515
          },
          {
            "timestamp": "2026-04-25 06:57:34,704",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1560"
              }
            ],
            "repeated": 0,
            "id": 6516
          },
          {
            "timestamp": "2026-04-25 06:57:34,704",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 6517
          },
          {
            "timestamp": "2026-04-25 06:57:34,704",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 6518
          },
          {
            "timestamp": "2026-04-25 06:57:34,704",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6519
          },
          {
            "timestamp": "2026-04-25 06:57:34,704",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 6520
          },
          {
            "timestamp": "2026-04-25 06:57:34,704",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6521
          },
          {
            "timestamp": "2026-04-25 06:57:34,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6522
          },
          {
            "timestamp": "2026-04-25 06:57:34,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6523
          },
          {
            "timestamp": "2026-04-25 06:57:34,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6524
          },
          {
            "timestamp": "2026-04-25 06:57:34,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6525
          },
          {
            "timestamp": "2026-04-25 06:57:34,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6526
          },
          {
            "timestamp": "2026-04-25 06:57:34,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6527
          },
          {
            "timestamp": "2026-04-25 06:57:34,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6528
          },
          {
            "timestamp": "2026-04-25 06:57:34,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6529
          },
          {
            "timestamp": "2026-04-25 06:57:34,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6530
          },
          {
            "timestamp": "2026-04-25 06:57:34,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6531
          },
          {
            "timestamp": "2026-04-25 06:57:34,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6532
          },
          {
            "timestamp": "2026-04-25 06:57:34,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6533
          },
          {
            "timestamp": "2026-04-25 06:57:34,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6534
          },
          {
            "timestamp": "2026-04-25 06:57:34,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6535
          },
          {
            "timestamp": "2026-04-25 06:57:34,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6536
          },
          {
            "timestamp": "2026-04-25 06:57:34,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6537
          },
          {
            "timestamp": "2026-04-25 06:57:34,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6538
          },
          {
            "timestamp": "2026-04-25 06:57:35,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6539
          },
          {
            "timestamp": "2026-04-25 06:57:35,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6540
          },
          {
            "timestamp": "2026-04-25 06:57:35,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6541
          },
          {
            "timestamp": "2026-04-25 06:57:35,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6542
          },
          {
            "timestamp": "2026-04-25 06:57:35,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6543
          },
          {
            "timestamp": "2026-04-25 06:57:35,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6544
          },
          {
            "timestamp": "2026-04-25 06:57:35,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6545
          },
          {
            "timestamp": "2026-04-25 06:57:35,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6546
          },
          {
            "timestamp": "2026-04-25 06:57:35,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6547
          },
          {
            "timestamp": "2026-04-25 06:57:35,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6548
          },
          {
            "timestamp": "2026-04-25 06:57:35,079",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6549
          },
          {
            "timestamp": "2026-04-25 06:57:35,079",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6550
          },
          {
            "timestamp": "2026-04-25 06:57:35,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6551
          },
          {
            "timestamp": "2026-04-25 06:57:35,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6552
          },
          {
            "timestamp": "2026-04-25 06:57:35,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6553
          },
          {
            "timestamp": "2026-04-25 06:57:35,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6554
          },
          {
            "timestamp": "2026-04-25 06:57:35,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6555
          },
          {
            "timestamp": "2026-04-25 06:57:35,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6556
          },
          {
            "timestamp": "2026-04-25 06:57:35,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6557
          },
          {
            "timestamp": "2026-04-25 06:57:35,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6558
          },
          {
            "timestamp": "2026-04-25 06:57:35,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6559
          },
          {
            "timestamp": "2026-04-25 06:57:35,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6560
          },
          {
            "timestamp": "2026-04-25 06:57:35,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6561
          },
          {
            "timestamp": "2026-04-25 06:57:35,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6562
          },
          {
            "timestamp": "2026-04-25 06:57:35,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6563
          },
          {
            "timestamp": "2026-04-25 06:57:35,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6564
          },
          {
            "timestamp": "2026-04-25 06:57:35,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6565
          },
          {
            "timestamp": "2026-04-25 06:57:35,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6566
          },
          {
            "timestamp": "2026-04-25 06:57:35,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6567
          },
          {
            "timestamp": "2026-04-25 06:57:35,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6568
          },
          {
            "timestamp": "2026-04-25 06:57:35,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6569
          },
          {
            "timestamp": "2026-04-25 06:57:35,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6570
          },
          {
            "timestamp": "2026-04-25 06:57:35,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6571
          },
          {
            "timestamp": "2026-04-25 06:57:35,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6572
          },
          {
            "timestamp": "2026-04-25 06:57:35,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6573
          },
          {
            "timestamp": "2026-04-25 06:57:35,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6574
          },
          {
            "timestamp": "2026-04-25 06:57:35,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6575
          },
          {
            "timestamp": "2026-04-25 06:57:35,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6576
          },
          {
            "timestamp": "2026-04-25 06:57:35,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6577
          },
          {
            "timestamp": "2026-04-25 06:57:35,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6578
          },
          {
            "timestamp": "2026-04-25 06:57:35,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6579
          },
          {
            "timestamp": "2026-04-25 06:57:35,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6580
          },
          {
            "timestamp": "2026-04-25 06:57:35,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6581
          },
          {
            "timestamp": "2026-04-25 06:57:35,438",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076bc7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 6582
          },
          {
            "timestamp": "2026-04-25 06:57:35,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6583
          },
          {
            "timestamp": "2026-04-25 06:57:35,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6584
          },
          {
            "timestamp": "2026-04-25 06:57:35,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6585
          },
          {
            "timestamp": "2026-04-25 06:57:35,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6586
          },
          {
            "timestamp": "2026-04-25 06:57:35,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6587
          },
          {
            "timestamp": "2026-04-25 06:57:35,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6588
          },
          {
            "timestamp": "2026-04-25 06:57:35,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6589
          },
          {
            "timestamp": "2026-04-25 06:57:35,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6590
          },
          {
            "timestamp": "2026-04-25 06:57:35,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6591
          },
          {
            "timestamp": "2026-04-25 06:57:35,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6592
          },
          {
            "timestamp": "2026-04-25 06:57:35,563",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6593
          },
          {
            "timestamp": "2026-04-25 06:57:35,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6594
          },
          {
            "timestamp": "2026-04-25 06:57:35,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6595
          },
          {
            "timestamp": "2026-04-25 06:57:35,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6596
          },
          {
            "timestamp": "2026-04-25 06:57:35,594",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6597
          },
          {
            "timestamp": "2026-04-25 06:57:35,594",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6598
          },
          {
            "timestamp": "2026-04-25 06:57:35,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6599
          },
          {
            "timestamp": "2026-04-25 06:57:35,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6600
          },
          {
            "timestamp": "2026-04-25 06:57:35,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6601
          },
          {
            "timestamp": "2026-04-25 06:57:35,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6602
          },
          {
            "timestamp": "2026-04-25 06:57:35,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6603
          },
          {
            "timestamp": "2026-04-25 06:57:35,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6604
          },
          {
            "timestamp": "2026-04-25 06:57:35,688",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6605
          },
          {
            "timestamp": "2026-04-25 06:57:35,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6606
          },
          {
            "timestamp": "2026-04-25 06:57:35,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6607
          },
          {
            "timestamp": "2026-04-25 06:57:35,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6608
          },
          {
            "timestamp": "2026-04-25 06:57:35,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6609
          },
          {
            "timestamp": "2026-04-25 06:57:35,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6610
          },
          {
            "timestamp": "2026-04-25 06:57:35,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6611
          },
          {
            "timestamp": "2026-04-25 06:57:35,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6612
          },
          {
            "timestamp": "2026-04-25 06:57:35,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6613
          },
          {
            "timestamp": "2026-04-25 06:57:35,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6614
          },
          {
            "timestamp": "2026-04-25 06:57:35,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6615
          },
          {
            "timestamp": "2026-04-25 06:57:35,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6616
          },
          {
            "timestamp": "2026-04-25 06:57:35,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6617
          },
          {
            "timestamp": "2026-04-25 06:57:35,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6618
          },
          {
            "timestamp": "2026-04-25 06:57:35,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6619
          },
          {
            "timestamp": "2026-04-25 06:57:35,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6620
          },
          {
            "timestamp": "2026-04-25 06:57:35,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6621
          },
          {
            "timestamp": "2026-04-25 06:57:35,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6622
          },
          {
            "timestamp": "2026-04-25 06:57:35,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6623
          },
          {
            "timestamp": "2026-04-25 06:57:35,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6624
          },
          {
            "timestamp": "2026-04-25 06:57:35,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6625
          },
          {
            "timestamp": "2026-04-25 06:57:35,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6626
          },
          {
            "timestamp": "2026-04-25 06:57:35,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6627
          },
          {
            "timestamp": "2026-04-25 06:57:35,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6628
          },
          {
            "timestamp": "2026-04-25 06:57:36,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6629
          },
          {
            "timestamp": "2026-04-25 06:57:36,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6630
          },
          {
            "timestamp": "2026-04-25 06:57:36,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6631
          },
          {
            "timestamp": "2026-04-25 06:57:36,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6632
          },
          {
            "timestamp": "2026-04-25 06:57:36,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6633
          },
          {
            "timestamp": "2026-04-25 06:57:36,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6634
          },
          {
            "timestamp": "2026-04-25 06:57:36,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6635
          },
          {
            "timestamp": "2026-04-25 06:57:36,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6636
          },
          {
            "timestamp": "2026-04-25 06:57:36,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6637
          },
          {
            "timestamp": "2026-04-25 06:57:36,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6638
          },
          {
            "timestamp": "2026-04-25 06:57:36,110",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6639
          },
          {
            "timestamp": "2026-04-25 06:57:36,110",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6640
          },
          {
            "timestamp": "2026-04-25 06:57:36,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6641
          },
          {
            "timestamp": "2026-04-25 06:57:36,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6642
          },
          {
            "timestamp": "2026-04-25 06:57:36,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6643
          },
          {
            "timestamp": "2026-04-25 06:57:36,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6644
          },
          {
            "timestamp": "2026-04-25 06:57:36,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6645
          },
          {
            "timestamp": "2026-04-25 06:57:36,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6646
          },
          {
            "timestamp": "2026-04-25 06:57:36,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6647
          },
          {
            "timestamp": "2026-04-25 06:57:36,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6648
          },
          {
            "timestamp": "2026-04-25 06:57:36,188",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6649
          },
          {
            "timestamp": "2026-04-25 06:57:36,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 6650
          },
          {
            "timestamp": "2026-04-25 06:57:36,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6651
          },
          {
            "timestamp": "2026-04-25 06:57:36,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6652
          },
          {
            "timestamp": "2026-04-25 06:57:36,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6653
          },
          {
            "timestamp": "2026-04-25 06:57:36,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6654
          },
          {
            "timestamp": "2026-04-25 06:57:36,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6655
          },
          {
            "timestamp": "2026-04-25 06:57:36,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6656
          },
          {
            "timestamp": "2026-04-25 06:57:36,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6657
          },
          {
            "timestamp": "2026-04-25 06:57:36,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6658
          },
          {
            "timestamp": "2026-04-25 06:57:36,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6659
          },
          {
            "timestamp": "2026-04-25 06:57:36,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6660
          },
          {
            "timestamp": "2026-04-25 06:57:36,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6661
          },
          {
            "timestamp": "2026-04-25 06:57:36,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6662
          },
          {
            "timestamp": "2026-04-25 06:57:36,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6663
          },
          {
            "timestamp": "2026-04-25 06:57:36,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6664
          },
          {
            "timestamp": "2026-04-25 06:57:36,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6665
          },
          {
            "timestamp": "2026-04-25 06:57:36,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6666
          },
          {
            "timestamp": "2026-04-25 06:57:36,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6667
          },
          {
            "timestamp": "2026-04-25 06:57:36,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6668
          },
          {
            "timestamp": "2026-04-25 06:57:36,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6669
          },
          {
            "timestamp": "2026-04-25 06:57:36,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6670
          },
          {
            "timestamp": "2026-04-25 06:57:36,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6671
          },
          {
            "timestamp": "2026-04-25 06:57:36,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6672
          },
          {
            "timestamp": "2026-04-25 06:57:36,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6673
          },
          {
            "timestamp": "2026-04-25 06:57:36,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6674
          },
          {
            "timestamp": "2026-04-25 06:57:36,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6675
          },
          {
            "timestamp": "2026-04-25 06:57:36,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6676
          },
          {
            "timestamp": "2026-04-25 06:57:36,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6677
          },
          {
            "timestamp": "2026-04-25 06:57:36,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6678
          },
          {
            "timestamp": "2026-04-25 06:57:36,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6679
          },
          {
            "timestamp": "2026-04-25 06:57:36,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6680
          },
          {
            "timestamp": "2026-04-25 06:57:36,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6681
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6682
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6683
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6684
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6685
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6686
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6687
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6688
          },
          {
            "timestamp": "2026-04-25 06:57:36,626",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6689
          },
          {
            "timestamp": "2026-04-25 06:57:36,688",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6690
          },
          {
            "timestamp": "2026-04-25 06:57:36,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6691
          },
          {
            "timestamp": "2026-04-25 06:57:36,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6692
          },
          {
            "timestamp": "2026-04-25 06:57:36,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6693
          },
          {
            "timestamp": "2026-04-25 06:57:36,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6694
          },
          {
            "timestamp": "2026-04-25 06:57:36,704",
            "thread_id": "2784",
            "caller": "0x77271454",
            "parentcaller": "0x7693b5fa",
            "category": "system",
            "api": "NtDuplicateObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SourceProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "SourceHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "TargetProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "TargetHandle",
                "value": "0x000006b8"
              },
              {
                "name": "Options",
                "value": "0x00000002"
              }
            ],
            "repeated": 0,
            "id": 6695
          },
          {
            "timestamp": "2026-04-25 06:57:36,704",
            "thread_id": "2784",
            "caller": "0x76938f18",
            "parentcaller": "0x76938dcd",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000058c"
              }
            ],
            "repeated": 0,
            "id": 6696
          },
          {
            "timestamp": "2026-04-25 06:57:36,704",
            "thread_id": "2784",
            "caller": "0x76938f18",
            "parentcaller": "0x76938dcd",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000588"
              }
            ],
            "repeated": 0,
            "id": 6697
          },
          {
            "timestamp": "2026-04-25 06:57:36,704",
            "thread_id": "2784",
            "caller": "0x76938f18",
            "parentcaller": "0x76938dcd",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              }
            ],
            "repeated": 0,
            "id": 6698
          },
          {
            "timestamp": "2026-04-25 06:57:36,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6699
          },
          {
            "timestamp": "2026-04-25 06:57:36,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6700
          },
          {
            "timestamp": "2026-04-25 06:57:36,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6701
          },
          {
            "timestamp": "2026-04-25 06:57:36,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6702
          },
          {
            "timestamp": "2026-04-25 06:57:36,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6703
          },
          {
            "timestamp": "2026-04-25 06:57:36,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6704
          },
          {
            "timestamp": "2026-04-25 06:57:36,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6705
          },
          {
            "timestamp": "2026-04-25 06:57:36,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6706
          },
          {
            "timestamp": "2026-04-25 06:57:36,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6707
          },
          {
            "timestamp": "2026-04-25 06:57:36,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6708
          },
          {
            "timestamp": "2026-04-25 06:57:36,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6709
          },
          {
            "timestamp": "2026-04-25 06:57:36,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6710
          },
          {
            "timestamp": "2026-04-25 06:57:36,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6711
          },
          {
            "timestamp": "2026-04-25 06:57:36,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6712
          },
          {
            "timestamp": "2026-04-25 06:57:36,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6713
          },
          {
            "timestamp": "2026-04-25 06:57:36,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6714
          },
          {
            "timestamp": "2026-04-25 06:57:36,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6715
          },
          {
            "timestamp": "2026-04-25 06:57:36,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6716
          },
          {
            "timestamp": "2026-04-25 06:57:36,938",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6717
          },
          {
            "timestamp": "2026-04-25 06:57:36,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6718
          },
          {
            "timestamp": "2026-04-25 06:57:36,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6719
          },
          {
            "timestamp": "2026-04-25 06:57:36,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6720
          },
          {
            "timestamp": "2026-04-25 06:57:37,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6721
          },
          {
            "timestamp": "2026-04-25 06:57:37,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6722
          },
          {
            "timestamp": "2026-04-25 06:57:37,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6723
          },
          {
            "timestamp": "2026-04-25 06:57:37,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6724
          },
          {
            "timestamp": "2026-04-25 06:57:37,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6725
          },
          {
            "timestamp": "2026-04-25 06:57:37,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6726
          },
          {
            "timestamp": "2026-04-25 06:57:37,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6727
          },
          {
            "timestamp": "2026-04-25 06:57:37,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6728
          },
          {
            "timestamp": "2026-04-25 06:57:37,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6729
          },
          {
            "timestamp": "2026-04-25 06:57:37,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6730
          },
          {
            "timestamp": "2026-04-25 06:57:37,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6731
          },
          {
            "timestamp": "2026-04-25 06:57:37,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6732
          },
          {
            "timestamp": "2026-04-25 06:57:37,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6733
          },
          {
            "timestamp": "2026-04-25 06:57:37,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6734
          },
          {
            "timestamp": "2026-04-25 06:57:37,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6735
          },
          {
            "timestamp": "2026-04-25 06:57:37,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6736
          },
          {
            "timestamp": "2026-04-25 06:57:37,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6737
          },
          {
            "timestamp": "2026-04-25 06:57:37,188",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6738
          },
          {
            "timestamp": "2026-04-25 06:57:37,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6739
          },
          {
            "timestamp": "2026-04-25 06:57:37,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6740
          },
          {
            "timestamp": "2026-04-25 06:57:37,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6741
          },
          {
            "timestamp": "2026-04-25 06:57:37,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6742
          },
          {
            "timestamp": "2026-04-25 06:57:37,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6743
          },
          {
            "timestamp": "2026-04-25 06:57:37,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6744
          },
          {
            "timestamp": "2026-04-25 06:57:37,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6745
          },
          {
            "timestamp": "2026-04-25 06:57:37,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6746
          },
          {
            "timestamp": "2026-04-25 06:57:37,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6747
          },
          {
            "timestamp": "2026-04-25 06:57:37,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6748
          },
          {
            "timestamp": "2026-04-25 06:57:37,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6749
          },
          {
            "timestamp": "2026-04-25 06:57:37,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6750
          },
          {
            "timestamp": "2026-04-25 06:57:37,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6751
          },
          {
            "timestamp": "2026-04-25 06:57:37,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6752
          },
          {
            "timestamp": "2026-04-25 06:57:37,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6753
          },
          {
            "timestamp": "2026-04-25 06:57:37,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6754
          },
          {
            "timestamp": "2026-04-25 06:57:37,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6755
          },
          {
            "timestamp": "2026-04-25 06:57:37,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6756
          },
          {
            "timestamp": "2026-04-25 06:57:37,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6757
          },
          {
            "timestamp": "2026-04-25 06:57:37,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6758
          },
          {
            "timestamp": "2026-04-25 06:57:37,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6759
          },
          {
            "timestamp": "2026-04-25 06:57:37,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6760
          },
          {
            "timestamp": "2026-04-25 06:57:37,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6761
          },
          {
            "timestamp": "2026-04-25 06:57:37,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6762
          },
          {
            "timestamp": "2026-04-25 06:57:37,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6763
          },
          {
            "timestamp": "2026-04-25 06:57:37,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6764
          },
          {
            "timestamp": "2026-04-25 06:57:37,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6765
          },
          {
            "timestamp": "2026-04-25 06:57:37,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6766
          },
          {
            "timestamp": "2026-04-25 06:57:37,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6767
          },
          {
            "timestamp": "2026-04-25 06:57:37,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6768
          },
          {
            "timestamp": "2026-04-25 06:57:37,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6769
          },
          {
            "timestamp": "2026-04-25 06:57:37,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6770
          },
          {
            "timestamp": "2026-04-25 06:57:37,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6771
          },
          {
            "timestamp": "2026-04-25 06:57:37,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6772
          },
          {
            "timestamp": "2026-04-25 06:57:37,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6773
          },
          {
            "timestamp": "2026-04-25 06:57:37,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6774
          },
          {
            "timestamp": "2026-04-25 06:57:37,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6775
          },
          {
            "timestamp": "2026-04-25 06:57:37,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6776
          },
          {
            "timestamp": "2026-04-25 06:57:37,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6777
          },
          {
            "timestamp": "2026-04-25 06:57:37,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6778
          },
          {
            "timestamp": "2026-04-25 06:57:37,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6779
          },
          {
            "timestamp": "2026-04-25 06:57:37,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6780
          },
          {
            "timestamp": "2026-04-25 06:57:37,657",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6781
          },
          {
            "timestamp": "2026-04-25 06:57:37,657",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6782
          },
          {
            "timestamp": "2026-04-25 06:57:37,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6783
          },
          {
            "timestamp": "2026-04-25 06:57:37,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6784
          },
          {
            "timestamp": "2026-04-25 06:57:37,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6785
          },
          {
            "timestamp": "2026-04-25 06:57:37,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6786
          },
          {
            "timestamp": "2026-04-25 06:57:37,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6787
          },
          {
            "timestamp": "2026-04-25 06:57:37,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6788
          },
          {
            "timestamp": "2026-04-25 06:57:37,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6789
          },
          {
            "timestamp": "2026-04-25 06:57:37,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6790
          },
          {
            "timestamp": "2026-04-25 06:57:37,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6791
          },
          {
            "timestamp": "2026-04-25 06:57:37,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6792
          },
          {
            "timestamp": "2026-04-25 06:57:37,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6793
          },
          {
            "timestamp": "2026-04-25 06:57:37,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6794
          },
          {
            "timestamp": "2026-04-25 06:57:37,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6795
          },
          {
            "timestamp": "2026-04-25 06:57:37,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6796
          },
          {
            "timestamp": "2026-04-25 06:57:37,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6797
          },
          {
            "timestamp": "2026-04-25 06:57:37,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6798
          },
          {
            "timestamp": "2026-04-25 06:57:37,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6799
          },
          {
            "timestamp": "2026-04-25 06:57:37,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6800
          },
          {
            "timestamp": "2026-04-25 06:57:37,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6801
          },
          {
            "timestamp": "2026-04-25 06:57:37,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6802
          },
          {
            "timestamp": "2026-04-25 06:57:37,938",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6803
          },
          {
            "timestamp": "2026-04-25 06:57:37,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6804
          },
          {
            "timestamp": "2026-04-25 06:57:37,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6805
          },
          {
            "timestamp": "2026-04-25 06:57:37,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6806
          },
          {
            "timestamp": "2026-04-25 06:57:37,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6807
          },
          {
            "timestamp": "2026-04-25 06:57:38,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6808
          },
          {
            "timestamp": "2026-04-25 06:57:38,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6809
          },
          {
            "timestamp": "2026-04-25 06:57:38,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6810
          },
          {
            "timestamp": "2026-04-25 06:57:38,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6811
          },
          {
            "timestamp": "2026-04-25 06:57:38,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6812
          },
          {
            "timestamp": "2026-04-25 06:57:38,063",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6813
          },
          {
            "timestamp": "2026-04-25 06:57:38,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6814
          },
          {
            "timestamp": "2026-04-25 06:57:38,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6815
          },
          {
            "timestamp": "2026-04-25 06:57:38,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6816
          },
          {
            "timestamp": "2026-04-25 06:57:38,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6817
          },
          {
            "timestamp": "2026-04-25 06:57:38,126",
            "thread_id": "6948",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05762000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 6818
          },
          {
            "timestamp": "2026-04-25 06:57:38,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6819
          },
          {
            "timestamp": "2026-04-25 06:57:38,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6820
          },
          {
            "timestamp": "2026-04-25 06:57:38,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6821
          },
          {
            "timestamp": "2026-04-25 06:57:38,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6822
          },
          {
            "timestamp": "2026-04-25 06:57:38,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6823
          },
          {
            "timestamp": "2026-04-25 06:57:38,172",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6824
          },
          {
            "timestamp": "2026-04-25 06:57:38,172",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6825
          },
          {
            "timestamp": "2026-04-25 06:57:38,188",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6826
          },
          {
            "timestamp": "2026-04-25 06:57:38,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6827
          },
          {
            "timestamp": "2026-04-25 06:57:38,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6828
          },
          {
            "timestamp": "2026-04-25 06:57:38,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6829
          },
          {
            "timestamp": "2026-04-25 06:57:38,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6830
          },
          {
            "timestamp": "2026-04-25 06:57:38,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6831
          },
          {
            "timestamp": "2026-04-25 06:57:38,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6832
          },
          {
            "timestamp": "2026-04-25 06:57:38,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6833
          },
          {
            "timestamp": "2026-04-25 06:57:38,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6834
          },
          {
            "timestamp": "2026-04-25 06:57:38,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6835
          },
          {
            "timestamp": "2026-04-25 06:57:38,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6836
          },
          {
            "timestamp": "2026-04-25 06:57:38,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6837
          },
          {
            "timestamp": "2026-04-25 06:57:38,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6838
          },
          {
            "timestamp": "2026-04-25 06:57:38,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6839
          },
          {
            "timestamp": "2026-04-25 06:57:38,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6840
          },
          {
            "timestamp": "2026-04-25 06:57:38,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6841
          },
          {
            "timestamp": "2026-04-25 06:57:38,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6842
          },
          {
            "timestamp": "2026-04-25 06:57:38,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6843
          },
          {
            "timestamp": "2026-04-25 06:57:38,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6844
          },
          {
            "timestamp": "2026-04-25 06:57:38,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6845
          },
          {
            "timestamp": "2026-04-25 06:57:38,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6846
          },
          {
            "timestamp": "2026-04-25 06:57:38,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6847
          },
          {
            "timestamp": "2026-04-25 06:57:38,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6848
          },
          {
            "timestamp": "2026-04-25 06:57:38,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6849
          },
          {
            "timestamp": "2026-04-25 06:57:38,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6850
          },
          {
            "timestamp": "2026-04-25 06:57:38,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6851
          },
          {
            "timestamp": "2026-04-25 06:57:38,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6852
          },
          {
            "timestamp": "2026-04-25 06:57:38,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6853
          },
          {
            "timestamp": "2026-04-25 06:57:38,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6854
          },
          {
            "timestamp": "2026-04-25 06:57:38,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6855
          },
          {
            "timestamp": "2026-04-25 06:57:38,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6856
          },
          {
            "timestamp": "2026-04-25 06:57:38,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6857
          },
          {
            "timestamp": "2026-04-25 06:57:38,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6858
          },
          {
            "timestamp": "2026-04-25 06:57:38,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6859
          },
          {
            "timestamp": "2026-04-25 06:57:38,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6860
          },
          {
            "timestamp": "2026-04-25 06:57:38,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6861
          },
          {
            "timestamp": "2026-04-25 06:57:38,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6862
          },
          {
            "timestamp": "2026-04-25 06:57:38,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6863
          },
          {
            "timestamp": "2026-04-25 06:57:38,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6864
          },
          {
            "timestamp": "2026-04-25 06:57:38,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6865
          },
          {
            "timestamp": "2026-04-25 06:57:38,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6866
          },
          {
            "timestamp": "2026-04-25 06:57:38,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6867
          },
          {
            "timestamp": "2026-04-25 06:57:38,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6868
          },
          {
            "timestamp": "2026-04-25 06:57:38,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6869
          },
          {
            "timestamp": "2026-04-25 06:57:38,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6870
          },
          {
            "timestamp": "2026-04-25 06:57:38,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6871
          },
          {
            "timestamp": "2026-04-25 06:57:38,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6872
          },
          {
            "timestamp": "2026-04-25 06:57:38,688",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6873
          },
          {
            "timestamp": "2026-04-25 06:57:38,688",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6874
          },
          {
            "timestamp": "2026-04-25 06:57:38,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6875
          },
          {
            "timestamp": "2026-04-25 06:57:38,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6876
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6877
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x067ed000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 6878
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6879
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6880
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6881
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6882
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 6883
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6884
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x0000060c",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1548"
              }
            ],
            "repeated": 0,
            "id": 6885
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1548"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 6886
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1548"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 6887
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 6888
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6889
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000060c"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 6890
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1548"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 6891
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6892
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6893
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6894
          },
          {
            "timestamp": "2026-04-25 06:57:38,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6895
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1548"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 6896
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 6897
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 6898
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 6899
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 6900
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 6901
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1548"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 6902
          },
          {
            "timestamp": "2026-04-25 06:57:38,735",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1548"
              }
            ],
            "repeated": 0,
            "id": 6903
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6904
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6905
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6906
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6907
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6908
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6909
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6910
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6911
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6912
          },
          {
            "timestamp": "2026-04-25 06:57:38,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6913
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 6914
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1548"
              }
            ],
            "repeated": 0,
            "id": 6915
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0507da9f",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 8,
            "id": 6916
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 6917
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 6918
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 6919
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6920
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 6921
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x0507593a",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6922
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6923
          },
          {
            "timestamp": "2026-04-25 06:57:38,766",
            "thread_id": "5976",
            "caller": "0x050759c3",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 6924
          },
          {
            "timestamp": "2026-04-25 06:57:38,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6925
          },
          {
            "timestamp": "2026-04-25 06:57:38,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6926
          },
          {
            "timestamp": "2026-04-25 06:57:38,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6927
          },
          {
            "timestamp": "2026-04-25 06:57:38,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6928
          },
          {
            "timestamp": "2026-04-25 06:57:38,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6929
          },
          {
            "timestamp": "2026-04-25 06:57:38,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6930
          },
          {
            "timestamp": "2026-04-25 06:57:38,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6931
          },
          {
            "timestamp": "2026-04-25 06:57:38,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6932
          },
          {
            "timestamp": "2026-04-25 06:57:38,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6933
          },
          {
            "timestamp": "2026-04-25 06:57:38,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6934
          },
          {
            "timestamp": "2026-04-25 06:57:38,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6935
          },
          {
            "timestamp": "2026-04-25 06:57:38,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6936
          },
          {
            "timestamp": "2026-04-25 06:57:38,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6937
          },
          {
            "timestamp": "2026-04-25 06:57:38,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6938
          },
          {
            "timestamp": "2026-04-25 06:57:38,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6939
          },
          {
            "timestamp": "2026-04-25 06:57:39,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6940
          },
          {
            "timestamp": "2026-04-25 06:57:39,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6941
          },
          {
            "timestamp": "2026-04-25 06:57:39,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6942
          },
          {
            "timestamp": "2026-04-25 06:57:39,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6943
          },
          {
            "timestamp": "2026-04-25 06:57:39,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6944
          },
          {
            "timestamp": "2026-04-25 06:57:39,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6945
          },
          {
            "timestamp": "2026-04-25 06:57:39,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6946
          },
          {
            "timestamp": "2026-04-25 06:57:39,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6947
          },
          {
            "timestamp": "2026-04-25 06:57:39,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6948
          },
          {
            "timestamp": "2026-04-25 06:57:39,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6949
          },
          {
            "timestamp": "2026-04-25 06:57:39,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6950
          },
          {
            "timestamp": "2026-04-25 06:57:39,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6951
          },
          {
            "timestamp": "2026-04-25 06:57:39,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6952
          },
          {
            "timestamp": "2026-04-25 06:57:39,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6953
          },
          {
            "timestamp": "2026-04-25 06:57:39,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6954
          },
          {
            "timestamp": "2026-04-25 06:57:39,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6955
          },
          {
            "timestamp": "2026-04-25 06:57:39,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6956
          },
          {
            "timestamp": "2026-04-25 06:57:39,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6957
          },
          {
            "timestamp": "2026-04-25 06:57:39,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6958
          },
          {
            "timestamp": "2026-04-25 06:57:39,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6959
          },
          {
            "timestamp": "2026-04-25 06:57:39,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6960
          },
          {
            "timestamp": "2026-04-25 06:57:39,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6961
          },
          {
            "timestamp": "2026-04-25 06:57:39,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6962
          },
          {
            "timestamp": "2026-04-25 06:57:39,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6963
          },
          {
            "timestamp": "2026-04-25 06:57:39,204",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 6964
          },
          {
            "timestamp": "2026-04-25 06:57:39,204",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 6965
          },
          {
            "timestamp": "2026-04-25 06:57:39,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6966
          },
          {
            "timestamp": "2026-04-25 06:57:39,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6967
          },
          {
            "timestamp": "2026-04-25 06:57:39,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6968
          },
          {
            "timestamp": "2026-04-25 06:57:39,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6969
          },
          {
            "timestamp": "2026-04-25 06:57:39,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6970
          },
          {
            "timestamp": "2026-04-25 06:57:39,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6971
          },
          {
            "timestamp": "2026-04-25 06:57:39,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6972
          },
          {
            "timestamp": "2026-04-25 06:57:39,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6973
          },
          {
            "timestamp": "2026-04-25 06:57:39,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6974
          },
          {
            "timestamp": "2026-04-25 06:57:39,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6975
          },
          {
            "timestamp": "2026-04-25 06:57:39,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6976
          },
          {
            "timestamp": "2026-04-25 06:57:39,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6977
          },
          {
            "timestamp": "2026-04-25 06:57:39,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6978
          },
          {
            "timestamp": "2026-04-25 06:57:39,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6979
          },
          {
            "timestamp": "2026-04-25 06:57:39,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6980
          },
          {
            "timestamp": "2026-04-25 06:57:39,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6981
          },
          {
            "timestamp": "2026-04-25 06:57:39,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6982
          },
          {
            "timestamp": "2026-04-25 06:57:39,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 6983
          },
          {
            "timestamp": "2026-04-25 06:57:39,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6984
          },
          {
            "timestamp": "2026-04-25 06:57:39,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6985
          },
          {
            "timestamp": "2026-04-25 06:57:39,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6986
          },
          {
            "timestamp": "2026-04-25 06:57:39,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6987
          },
          {
            "timestamp": "2026-04-25 06:57:39,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6988
          },
          {
            "timestamp": "2026-04-25 06:57:39,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6989
          },
          {
            "timestamp": "2026-04-25 06:57:39,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6990
          },
          {
            "timestamp": "2026-04-25 06:57:39,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6991
          },
          {
            "timestamp": "2026-04-25 06:57:39,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6992
          },
          {
            "timestamp": "2026-04-25 06:57:39,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6993
          },
          {
            "timestamp": "2026-04-25 06:57:39,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6994
          },
          {
            "timestamp": "2026-04-25 06:57:39,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6995
          },
          {
            "timestamp": "2026-04-25 06:57:39,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6996
          },
          {
            "timestamp": "2026-04-25 06:57:39,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 6997
          },
          {
            "timestamp": "2026-04-25 06:57:39,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 6998
          },
          {
            "timestamp": "2026-04-25 06:57:39,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 6999
          },
          {
            "timestamp": "2026-04-25 06:57:39,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7000
          },
          {
            "timestamp": "2026-04-25 06:57:39,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7001
          },
          {
            "timestamp": "2026-04-25 06:57:39,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7002
          },
          {
            "timestamp": "2026-04-25 06:57:39,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7003
          },
          {
            "timestamp": "2026-04-25 06:57:39,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7004
          },
          {
            "timestamp": "2026-04-25 06:57:39,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7005
          },
          {
            "timestamp": "2026-04-25 06:57:39,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7006
          },
          {
            "timestamp": "2026-04-25 06:57:39,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7007
          },
          {
            "timestamp": "2026-04-25 06:57:39,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7008
          },
          {
            "timestamp": "2026-04-25 06:57:39,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7009
          },
          {
            "timestamp": "2026-04-25 06:57:39,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7010
          },
          {
            "timestamp": "2026-04-25 06:57:39,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7011
          },
          {
            "timestamp": "2026-04-25 06:57:39,719",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7012
          },
          {
            "timestamp": "2026-04-25 06:57:39,719",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7013
          },
          {
            "timestamp": "2026-04-25 06:57:39,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7014
          },
          {
            "timestamp": "2026-04-25 06:57:39,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7015
          },
          {
            "timestamp": "2026-04-25 06:57:39,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7016
          },
          {
            "timestamp": "2026-04-25 06:57:39,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7017
          },
          {
            "timestamp": "2026-04-25 06:57:39,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7018
          },
          {
            "timestamp": "2026-04-25 06:57:39,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7019
          },
          {
            "timestamp": "2026-04-25 06:57:39,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7020
          },
          {
            "timestamp": "2026-04-25 06:57:39,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7021
          },
          {
            "timestamp": "2026-04-25 06:57:39,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7022
          },
          {
            "timestamp": "2026-04-25 06:57:39,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7023
          },
          {
            "timestamp": "2026-04-25 06:57:39,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7024
          },
          {
            "timestamp": "2026-04-25 06:57:39,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7025
          },
          {
            "timestamp": "2026-04-25 06:57:39,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7026
          },
          {
            "timestamp": "2026-04-25 06:57:39,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7027
          },
          {
            "timestamp": "2026-04-25 06:57:39,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7028
          },
          {
            "timestamp": "2026-04-25 06:57:39,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7029
          },
          {
            "timestamp": "2026-04-25 06:57:39,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7030
          },
          {
            "timestamp": "2026-04-25 06:57:39,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7031
          },
          {
            "timestamp": "2026-04-25 06:57:39,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7032
          },
          {
            "timestamp": "2026-04-25 06:57:39,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7033
          },
          {
            "timestamp": "2026-04-25 06:57:40,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7034
          },
          {
            "timestamp": "2026-04-25 06:57:40,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7035
          },
          {
            "timestamp": "2026-04-25 06:57:40,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7036
          },
          {
            "timestamp": "2026-04-25 06:57:40,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7037
          },
          {
            "timestamp": "2026-04-25 06:57:40,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7038
          },
          {
            "timestamp": "2026-04-25 06:57:40,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7039
          },
          {
            "timestamp": "2026-04-25 06:57:40,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7040
          },
          {
            "timestamp": "2026-04-25 06:57:40,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7041
          },
          {
            "timestamp": "2026-04-25 06:57:40,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7042
          },
          {
            "timestamp": "2026-04-25 06:57:40,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7043
          },
          {
            "timestamp": "2026-04-25 06:57:40,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7044
          },
          {
            "timestamp": "2026-04-25 06:57:40,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7045
          },
          {
            "timestamp": "2026-04-25 06:57:40,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7046
          },
          {
            "timestamp": "2026-04-25 06:57:40,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7047
          },
          {
            "timestamp": "2026-04-25 06:57:40,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7048
          },
          {
            "timestamp": "2026-04-25 06:57:40,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7049
          },
          {
            "timestamp": "2026-04-25 06:57:40,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7050
          },
          {
            "timestamp": "2026-04-25 06:57:40,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7051
          },
          {
            "timestamp": "2026-04-25 06:57:40,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7052
          },
          {
            "timestamp": "2026-04-25 06:57:40,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7053
          },
          {
            "timestamp": "2026-04-25 06:57:40,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7054
          },
          {
            "timestamp": "2026-04-25 06:57:40,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7055
          },
          {
            "timestamp": "2026-04-25 06:57:40,235",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7056
          },
          {
            "timestamp": "2026-04-25 06:57:40,235",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7057
          },
          {
            "timestamp": "2026-04-25 06:57:40,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7058
          },
          {
            "timestamp": "2026-04-25 06:57:40,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7059
          },
          {
            "timestamp": "2026-04-25 06:57:40,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7060
          },
          {
            "timestamp": "2026-04-25 06:57:40,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7061
          },
          {
            "timestamp": "2026-04-25 06:57:40,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7062
          },
          {
            "timestamp": "2026-04-25 06:57:40,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7063
          },
          {
            "timestamp": "2026-04-25 06:57:40,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7064
          },
          {
            "timestamp": "2026-04-25 06:57:40,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7065
          },
          {
            "timestamp": "2026-04-25 06:57:40,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7066
          },
          {
            "timestamp": "2026-04-25 06:57:40,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7067
          },
          {
            "timestamp": "2026-04-25 06:57:40,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7068
          },
          {
            "timestamp": "2026-04-25 06:57:40,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7069
          },
          {
            "timestamp": "2026-04-25 06:57:40,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7070
          },
          {
            "timestamp": "2026-04-25 06:57:40,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7071
          },
          {
            "timestamp": "2026-04-25 06:57:40,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7072
          },
          {
            "timestamp": "2026-04-25 06:57:40,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7073
          },
          {
            "timestamp": "2026-04-25 06:57:40,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7074
          },
          {
            "timestamp": "2026-04-25 06:57:40,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7075
          },
          {
            "timestamp": "2026-04-25 06:57:40,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7076
          },
          {
            "timestamp": "2026-04-25 06:57:40,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7077
          },
          {
            "timestamp": "2026-04-25 06:57:40,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7078
          },
          {
            "timestamp": "2026-04-25 06:57:40,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7079
          },
          {
            "timestamp": "2026-04-25 06:57:40,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7080
          },
          {
            "timestamp": "2026-04-25 06:57:40,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7081
          },
          {
            "timestamp": "2026-04-25 06:57:40,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7082
          },
          {
            "timestamp": "2026-04-25 06:57:40,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7083
          },
          {
            "timestamp": "2026-04-25 06:57:40,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7084
          },
          {
            "timestamp": "2026-04-25 06:57:40,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7085
          },
          {
            "timestamp": "2026-04-25 06:57:40,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7086
          },
          {
            "timestamp": "2026-04-25 06:57:40,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7087
          },
          {
            "timestamp": "2026-04-25 06:57:40,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7088
          },
          {
            "timestamp": "2026-04-25 06:57:40,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7089
          },
          {
            "timestamp": "2026-04-25 06:57:40,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7090
          },
          {
            "timestamp": "2026-04-25 06:57:40,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7091
          },
          {
            "timestamp": "2026-04-25 06:57:40,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7092
          },
          {
            "timestamp": "2026-04-25 06:57:40,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7093
          },
          {
            "timestamp": "2026-04-25 06:57:40,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7094
          },
          {
            "timestamp": "2026-04-25 06:57:40,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7095
          },
          {
            "timestamp": "2026-04-25 06:57:40,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7096
          },
          {
            "timestamp": "2026-04-25 06:57:40,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7097
          },
          {
            "timestamp": "2026-04-25 06:57:40,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7098
          },
          {
            "timestamp": "2026-04-25 06:57:40,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7099
          },
          {
            "timestamp": "2026-04-25 06:57:40,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7100
          },
          {
            "timestamp": "2026-04-25 06:57:40,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7101
          },
          {
            "timestamp": "2026-04-25 06:57:40,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7102
          },
          {
            "timestamp": "2026-04-25 06:57:40,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7103
          },
          {
            "timestamp": "2026-04-25 06:57:40,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7104
          },
          {
            "timestamp": "2026-04-25 06:57:40,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7105
          },
          {
            "timestamp": "2026-04-25 06:57:40,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7106
          },
          {
            "timestamp": "2026-04-25 06:57:40,751",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7107
          },
          {
            "timestamp": "2026-04-25 06:57:40,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7108
          },
          {
            "timestamp": "2026-04-25 06:57:40,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7109
          },
          {
            "timestamp": "2026-04-25 06:57:40,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7110
          },
          {
            "timestamp": "2026-04-25 06:57:40,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7111
          },
          {
            "timestamp": "2026-04-25 06:57:40,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7112
          },
          {
            "timestamp": "2026-04-25 06:57:40,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7113
          },
          {
            "timestamp": "2026-04-25 06:57:40,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7114
          },
          {
            "timestamp": "2026-04-25 06:57:40,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7115
          },
          {
            "timestamp": "2026-04-25 06:57:40,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7116
          },
          {
            "timestamp": "2026-04-25 06:57:40,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7117
          },
          {
            "timestamp": "2026-04-25 06:57:40,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7118
          },
          {
            "timestamp": "2026-04-25 06:57:40,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7119
          },
          {
            "timestamp": "2026-04-25 06:57:40,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7120
          },
          {
            "timestamp": "2026-04-25 06:57:40,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7121
          },
          {
            "timestamp": "2026-04-25 06:57:40,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7122
          },
          {
            "timestamp": "2026-04-25 06:57:40,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7123
          },
          {
            "timestamp": "2026-04-25 06:57:40,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7124
          },
          {
            "timestamp": "2026-04-25 06:57:40,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7125
          },
          {
            "timestamp": "2026-04-25 06:57:41,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7126
          },
          {
            "timestamp": "2026-04-25 06:57:41,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7127
          },
          {
            "timestamp": "2026-04-25 06:57:41,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7128
          },
          {
            "timestamp": "2026-04-25 06:57:41,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7129
          },
          {
            "timestamp": "2026-04-25 06:57:41,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7130
          },
          {
            "timestamp": "2026-04-25 06:57:41,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7131
          },
          {
            "timestamp": "2026-04-25 06:57:41,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7132
          },
          {
            "timestamp": "2026-04-25 06:57:41,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7133
          },
          {
            "timestamp": "2026-04-25 06:57:41,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7134
          },
          {
            "timestamp": "2026-04-25 06:57:41,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7135
          },
          {
            "timestamp": "2026-04-25 06:57:41,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7136
          },
          {
            "timestamp": "2026-04-25 06:57:41,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7137
          },
          {
            "timestamp": "2026-04-25 06:57:41,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7138
          },
          {
            "timestamp": "2026-04-25 06:57:41,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7139
          },
          {
            "timestamp": "2026-04-25 06:57:41,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7140
          },
          {
            "timestamp": "2026-04-25 06:57:41,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7141
          },
          {
            "timestamp": "2026-04-25 06:57:41,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7142
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7143
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7144
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7145
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7146
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7147
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7148
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7149
          },
          {
            "timestamp": "2026-04-25 06:57:41,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7150
          },
          {
            "timestamp": "2026-04-25 06:57:41,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7151
          },
          {
            "timestamp": "2026-04-25 06:57:41,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7152
          },
          {
            "timestamp": "2026-04-25 06:57:41,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7153
          },
          {
            "timestamp": "2026-04-25 06:57:41,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7154
          },
          {
            "timestamp": "2026-04-25 06:57:41,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7155
          },
          {
            "timestamp": "2026-04-25 06:57:41,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7156
          },
          {
            "timestamp": "2026-04-25 06:57:41,266",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7157
          },
          {
            "timestamp": "2026-04-25 06:57:41,266",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7158
          },
          {
            "timestamp": "2026-04-25 06:57:41,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7159
          },
          {
            "timestamp": "2026-04-25 06:57:41,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7160
          },
          {
            "timestamp": "2026-04-25 06:57:41,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7161
          },
          {
            "timestamp": "2026-04-25 06:57:41,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7162
          },
          {
            "timestamp": "2026-04-25 06:57:41,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7163
          },
          {
            "timestamp": "2026-04-25 06:57:41,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7164
          },
          {
            "timestamp": "2026-04-25 06:57:41,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7165
          },
          {
            "timestamp": "2026-04-25 06:57:41,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7166
          },
          {
            "timestamp": "2026-04-25 06:57:41,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7167
          },
          {
            "timestamp": "2026-04-25 06:57:41,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7168
          },
          {
            "timestamp": "2026-04-25 06:57:41,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7169
          },
          {
            "timestamp": "2026-04-25 06:57:41,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7170
          },
          {
            "timestamp": "2026-04-25 06:57:41,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7171
          },
          {
            "timestamp": "2026-04-25 06:57:41,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7172
          },
          {
            "timestamp": "2026-04-25 06:57:41,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7173
          },
          {
            "timestamp": "2026-04-25 06:57:41,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7174
          },
          {
            "timestamp": "2026-04-25 06:57:41,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7175
          },
          {
            "timestamp": "2026-04-25 06:57:41,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7176
          },
          {
            "timestamp": "2026-04-25 06:57:41,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7177
          },
          {
            "timestamp": "2026-04-25 06:57:41,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7178
          },
          {
            "timestamp": "2026-04-25 06:57:41,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7179
          },
          {
            "timestamp": "2026-04-25 06:57:41,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7180
          },
          {
            "timestamp": "2026-04-25 06:57:41,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7181
          },
          {
            "timestamp": "2026-04-25 06:57:41,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7182
          },
          {
            "timestamp": "2026-04-25 06:57:41,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7183
          },
          {
            "timestamp": "2026-04-25 06:57:41,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7184
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x7385b070",
            "parentcaller": "0x7385b08b",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "16"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "7440"
              }
            ],
            "repeated": 0,
            "id": 7185
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x7726074f",
            "parentcaller": "0x77bfbb70",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "oleaut32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76060000"
              }
            ],
            "repeated": 0,
            "id": 7186
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x77eab5a6",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "7440"
              }
            ],
            "repeated": 0,
            "id": 7187
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x747cad94",
            "parentcaller": "0x747ca15c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000063c"
              }
            ],
            "repeated": 0,
            "id": 7188
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 7189
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x774e45ae",
            "parentcaller": "0x774e442c",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 7190
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x7726269a",
            "parentcaller": "0x76645041",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000638"
              }
            ],
            "repeated": 0,
            "id": 7191
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000644"
              }
            ],
            "repeated": 0,
            "id": 7192
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000640"
              }
            ],
            "repeated": 0,
            "id": 7193
          },
          {
            "timestamp": "2026-04-25 06:57:41,594",
            "thread_id": "7440",
            "caller": "0x77eab5c9",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 7194
          },
          {
            "timestamp": "2026-04-25 06:57:41,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7195
          },
          {
            "timestamp": "2026-04-25 06:57:41,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7196
          },
          {
            "timestamp": "2026-04-25 06:57:41,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7197
          },
          {
            "timestamp": "2026-04-25 06:57:41,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7198
          },
          {
            "timestamp": "2026-04-25 06:57:41,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7199
          },
          {
            "timestamp": "2026-04-25 06:57:41,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7200
          },
          {
            "timestamp": "2026-04-25 06:57:41,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7201
          },
          {
            "timestamp": "2026-04-25 06:57:41,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7202
          },
          {
            "timestamp": "2026-04-25 06:57:41,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7203
          },
          {
            "timestamp": "2026-04-25 06:57:41,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7204
          },
          {
            "timestamp": "2026-04-25 06:57:41,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7205
          },
          {
            "timestamp": "2026-04-25 06:57:41,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7206
          },
          {
            "timestamp": "2026-04-25 06:57:41,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7207
          },
          {
            "timestamp": "2026-04-25 06:57:41,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7208
          },
          {
            "timestamp": "2026-04-25 06:57:41,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7209
          },
          {
            "timestamp": "2026-04-25 06:57:41,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7210
          },
          {
            "timestamp": "2026-04-25 06:57:41,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7211
          },
          {
            "timestamp": "2026-04-25 06:57:41,782",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7212
          },
          {
            "timestamp": "2026-04-25 06:57:41,782",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7213
          },
          {
            "timestamp": "2026-04-25 06:57:41,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7214
          },
          {
            "timestamp": "2026-04-25 06:57:41,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7215
          },
          {
            "timestamp": "2026-04-25 06:57:41,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7216
          },
          {
            "timestamp": "2026-04-25 06:57:41,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7217
          },
          {
            "timestamp": "2026-04-25 06:57:41,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7218
          },
          {
            "timestamp": "2026-04-25 06:57:41,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7219
          },
          {
            "timestamp": "2026-04-25 06:57:41,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7220
          },
          {
            "timestamp": "2026-04-25 06:57:41,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7221
          },
          {
            "timestamp": "2026-04-25 06:57:41,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7222
          },
          {
            "timestamp": "2026-04-25 06:57:41,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7223
          },
          {
            "timestamp": "2026-04-25 06:57:41,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7224
          },
          {
            "timestamp": "2026-04-25 06:57:41,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7225
          },
          {
            "timestamp": "2026-04-25 06:57:41,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7226
          },
          {
            "timestamp": "2026-04-25 06:57:41,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7227
          },
          {
            "timestamp": "2026-04-25 06:57:42,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7228
          },
          {
            "timestamp": "2026-04-25 06:57:42,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7229
          },
          {
            "timestamp": "2026-04-25 06:57:42,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7230
          },
          {
            "timestamp": "2026-04-25 06:57:42,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7231
          },
          {
            "timestamp": "2026-04-25 06:57:42,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7232
          },
          {
            "timestamp": "2026-04-25 06:57:42,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7233
          },
          {
            "timestamp": "2026-04-25 06:57:42,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7234
          },
          {
            "timestamp": "2026-04-25 06:57:42,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7235
          },
          {
            "timestamp": "2026-04-25 06:57:42,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7236
          },
          {
            "timestamp": "2026-04-25 06:57:42,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7237
          },
          {
            "timestamp": "2026-04-25 06:57:42,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7238
          },
          {
            "timestamp": "2026-04-25 06:57:42,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7239
          },
          {
            "timestamp": "2026-04-25 06:57:42,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7240
          },
          {
            "timestamp": "2026-04-25 06:57:42,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7241
          },
          {
            "timestamp": "2026-04-25 06:57:42,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7242
          },
          {
            "timestamp": "2026-04-25 06:57:42,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7243
          },
          {
            "timestamp": "2026-04-25 06:57:42,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7244
          },
          {
            "timestamp": "2026-04-25 06:57:42,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7245
          },
          {
            "timestamp": "2026-04-25 06:57:42,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7246
          },
          {
            "timestamp": "2026-04-25 06:57:42,188",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7247
          },
          {
            "timestamp": "2026-04-25 06:57:42,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7248
          },
          {
            "timestamp": "2026-04-25 06:57:42,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7249
          },
          {
            "timestamp": "2026-04-25 06:57:42,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7250
          },
          {
            "timestamp": "2026-04-25 06:57:42,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7251
          },
          {
            "timestamp": "2026-04-25 06:57:42,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7252
          },
          {
            "timestamp": "2026-04-25 06:57:42,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7253
          },
          {
            "timestamp": "2026-04-25 06:57:42,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7254
          },
          {
            "timestamp": "2026-04-25 06:57:42,297",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7255
          },
          {
            "timestamp": "2026-04-25 06:57:42,297",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7256
          },
          {
            "timestamp": "2026-04-25 06:57:42,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7257
          },
          {
            "timestamp": "2026-04-25 06:57:42,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7258
          },
          {
            "timestamp": "2026-04-25 06:57:42,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7259
          },
          {
            "timestamp": "2026-04-25 06:57:42,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7260
          },
          {
            "timestamp": "2026-04-25 06:57:42,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7261
          },
          {
            "timestamp": "2026-04-25 06:57:42,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7262
          },
          {
            "timestamp": "2026-04-25 06:57:42,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7263
          },
          {
            "timestamp": "2026-04-25 06:57:42,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7264
          },
          {
            "timestamp": "2026-04-25 06:57:42,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7265
          },
          {
            "timestamp": "2026-04-25 06:57:42,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7266
          },
          {
            "timestamp": "2026-04-25 06:57:42,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7267
          },
          {
            "timestamp": "2026-04-25 06:57:42,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7268
          },
          {
            "timestamp": "2026-04-25 06:57:42,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7269
          },
          {
            "timestamp": "2026-04-25 06:57:42,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7270
          },
          {
            "timestamp": "2026-04-25 06:57:42,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7271
          },
          {
            "timestamp": "2026-04-25 06:57:42,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7272
          },
          {
            "timestamp": "2026-04-25 06:57:42,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7273
          },
          {
            "timestamp": "2026-04-25 06:57:42,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7274
          },
          {
            "timestamp": "2026-04-25 06:57:42,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7275
          },
          {
            "timestamp": "2026-04-25 06:57:42,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7276
          },
          {
            "timestamp": "2026-04-25 06:57:42,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7277
          },
          {
            "timestamp": "2026-04-25 06:57:42,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7278
          },
          {
            "timestamp": "2026-04-25 06:57:42,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7279
          },
          {
            "timestamp": "2026-04-25 06:57:42,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7280
          },
          {
            "timestamp": "2026-04-25 06:57:42,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7281
          },
          {
            "timestamp": "2026-04-25 06:57:42,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7282
          },
          {
            "timestamp": "2026-04-25 06:57:42,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7283
          },
          {
            "timestamp": "2026-04-25 06:57:42,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7284
          },
          {
            "timestamp": "2026-04-25 06:57:42,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7285
          },
          {
            "timestamp": "2026-04-25 06:57:42,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7286
          },
          {
            "timestamp": "2026-04-25 06:57:42,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7287
          },
          {
            "timestamp": "2026-04-25 06:57:42,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7288
          },
          {
            "timestamp": "2026-04-25 06:57:42,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7289
          },
          {
            "timestamp": "2026-04-25 06:57:42,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7290
          },
          {
            "timestamp": "2026-04-25 06:57:42,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7291
          },
          {
            "timestamp": "2026-04-25 06:57:42,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7292
          },
          {
            "timestamp": "2026-04-25 06:57:42,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7293
          },
          {
            "timestamp": "2026-04-25 06:57:42,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7294
          },
          {
            "timestamp": "2026-04-25 06:57:42,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7295
          },
          {
            "timestamp": "2026-04-25 06:57:42,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7296
          },
          {
            "timestamp": "2026-04-25 06:57:42,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7297
          },
          {
            "timestamp": "2026-04-25 06:57:42,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7298
          },
          {
            "timestamp": "2026-04-25 06:57:42,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7299
          },
          {
            "timestamp": "2026-04-25 06:57:42,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7300
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7301
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0680d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 7302
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7303
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7304
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7305
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7306
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 7307
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x0507ee1e",
            "parentcaller": "0x0507ed59",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05772000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 7308
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7309
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x0000064c",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1612"
              }
            ],
            "repeated": 0,
            "id": 7310
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 7311
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 7312
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7313
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7314
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 7315
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000064c"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 7316
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 7317
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7318
          },
          {
            "timestamp": "2026-04-25 06:57:42,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7319
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 7320
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 7321
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 7322
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 7323
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 7324
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 7325
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1612"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 7326
          },
          {
            "timestamp": "2026-04-25 06:57:42,797",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              }
            ],
            "repeated": 0,
            "id": 7327
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7328
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7329
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7330
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7331
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7332
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7333
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7334
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7335
          },
          {
            "timestamp": "2026-04-25 06:57:42,813",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7336
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 7337
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1612"
              }
            ],
            "repeated": 0,
            "id": 7338
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 7339
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 7340
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7341
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 7342
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 8,
            "id": 7343
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000638"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2788"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "5852"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 7344
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "3116",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x00000638",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2788"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "5852"
              }
            ],
            "repeated": 0,
            "id": 7345
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "3116",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000638"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "5852"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 7346
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7347
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7348
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5976",
            "caller": "0x050759c3",
            "parentcaller": "0x0507629c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7349
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5852",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 7350
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5852",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7351
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5852",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 7352
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5852",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 7353
          },
          {
            "timestamp": "2026-04-25 06:57:42,829",
            "thread_id": "5976",
            "caller": "0x0507593a",
            "parentcaller": "0x050762a7",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7354
          },
          {
            "timestamp": "2026-04-25 06:57:42,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7355
          },
          {
            "timestamp": "2026-04-25 06:57:42,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7356
          },
          {
            "timestamp": "2026-04-25 06:57:42,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7357
          },
          {
            "timestamp": "2026-04-25 06:57:42,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7358
          },
          {
            "timestamp": "2026-04-25 06:57:42,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7359
          },
          {
            "timestamp": "2026-04-25 06:57:42,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7360
          },
          {
            "timestamp": "2026-04-25 06:57:42,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7361
          },
          {
            "timestamp": "2026-04-25 06:57:42,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7362
          },
          {
            "timestamp": "2026-04-25 06:57:43,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7363
          },
          {
            "timestamp": "2026-04-25 06:57:43,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7364
          },
          {
            "timestamp": "2026-04-25 06:57:43,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7365
          },
          {
            "timestamp": "2026-04-25 06:57:43,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7366
          },
          {
            "timestamp": "2026-04-25 06:57:43,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7367
          },
          {
            "timestamp": "2026-04-25 06:57:43,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7368
          },
          {
            "timestamp": "2026-04-25 06:57:43,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7369
          },
          {
            "timestamp": "2026-04-25 06:57:43,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7370
          },
          {
            "timestamp": "2026-04-25 06:57:43,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7371
          },
          {
            "timestamp": "2026-04-25 06:57:43,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7372
          },
          {
            "timestamp": "2026-04-25 06:57:43,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7373
          },
          {
            "timestamp": "2026-04-25 06:57:43,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7374
          },
          {
            "timestamp": "2026-04-25 06:57:43,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7375
          },
          {
            "timestamp": "2026-04-25 06:57:43,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7376
          },
          {
            "timestamp": "2026-04-25 06:57:43,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7377
          },
          {
            "timestamp": "2026-04-25 06:57:43,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7378
          },
          {
            "timestamp": "2026-04-25 06:57:43,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7379
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7380
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7381
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7382
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7383
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7384
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7385
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7386
          },
          {
            "timestamp": "2026-04-25 06:57:43,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7387
          },
          {
            "timestamp": "2026-04-25 06:57:43,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7388
          },
          {
            "timestamp": "2026-04-25 06:57:43,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7389
          },
          {
            "timestamp": "2026-04-25 06:57:43,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7390
          },
          {
            "timestamp": "2026-04-25 06:57:43,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7391
          },
          {
            "timestamp": "2026-04-25 06:57:43,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7392
          },
          {
            "timestamp": "2026-04-25 06:57:43,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7393
          },
          {
            "timestamp": "2026-04-25 06:57:43,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7394
          },
          {
            "timestamp": "2026-04-25 06:57:43,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7395
          },
          {
            "timestamp": "2026-04-25 06:57:43,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7396
          },
          {
            "timestamp": "2026-04-25 06:57:43,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7397
          },
          {
            "timestamp": "2026-04-25 06:57:43,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7398
          },
          {
            "timestamp": "2026-04-25 06:57:43,329",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7399
          },
          {
            "timestamp": "2026-04-25 06:57:43,329",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7400
          },
          {
            "timestamp": "2026-04-25 06:57:43,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7401
          },
          {
            "timestamp": "2026-04-25 06:57:43,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7402
          },
          {
            "timestamp": "2026-04-25 06:57:43,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7403
          },
          {
            "timestamp": "2026-04-25 06:57:43,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7404
          },
          {
            "timestamp": "2026-04-25 06:57:43,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7405
          },
          {
            "timestamp": "2026-04-25 06:57:43,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7406
          },
          {
            "timestamp": "2026-04-25 06:57:43,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7407
          },
          {
            "timestamp": "2026-04-25 06:57:43,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7408
          },
          {
            "timestamp": "2026-04-25 06:57:43,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7409
          },
          {
            "timestamp": "2026-04-25 06:57:43,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7410
          },
          {
            "timestamp": "2026-04-25 06:57:43,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7411
          },
          {
            "timestamp": "2026-04-25 06:57:43,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7412
          },
          {
            "timestamp": "2026-04-25 06:57:43,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7413
          },
          {
            "timestamp": "2026-04-25 06:57:43,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7414
          },
          {
            "timestamp": "2026-04-25 06:57:43,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7415
          },
          {
            "timestamp": "2026-04-25 06:57:43,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7416
          },
          {
            "timestamp": "2026-04-25 06:57:43,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7417
          },
          {
            "timestamp": "2026-04-25 06:57:43,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7418
          },
          {
            "timestamp": "2026-04-25 06:57:43,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7419
          },
          {
            "timestamp": "2026-04-25 06:57:43,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7420
          },
          {
            "timestamp": "2026-04-25 06:57:43,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7421
          },
          {
            "timestamp": "2026-04-25 06:57:43,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7422
          },
          {
            "timestamp": "2026-04-25 06:57:43,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7423
          },
          {
            "timestamp": "2026-04-25 06:57:43,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7424
          },
          {
            "timestamp": "2026-04-25 06:57:43,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7425
          },
          {
            "timestamp": "2026-04-25 06:57:43,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7426
          },
          {
            "timestamp": "2026-04-25 06:57:43,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7427
          },
          {
            "timestamp": "2026-04-25 06:57:43,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7428
          },
          {
            "timestamp": "2026-04-25 06:57:43,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7429
          },
          {
            "timestamp": "2026-04-25 06:57:43,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7430
          },
          {
            "timestamp": "2026-04-25 06:57:43,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7431
          },
          {
            "timestamp": "2026-04-25 06:57:43,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7432
          },
          {
            "timestamp": "2026-04-25 06:57:43,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7433
          },
          {
            "timestamp": "2026-04-25 06:57:43,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7434
          },
          {
            "timestamp": "2026-04-25 06:57:43,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7435
          },
          {
            "timestamp": "2026-04-25 06:57:43,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7436
          },
          {
            "timestamp": "2026-04-25 06:57:43,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7437
          },
          {
            "timestamp": "2026-04-25 06:57:43,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7438
          },
          {
            "timestamp": "2026-04-25 06:57:43,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7439
          },
          {
            "timestamp": "2026-04-25 06:57:43,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7440
          },
          {
            "timestamp": "2026-04-25 06:57:43,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7441
          },
          {
            "timestamp": "2026-04-25 06:57:43,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7442
          },
          {
            "timestamp": "2026-04-25 06:57:43,844",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7443
          },
          {
            "timestamp": "2026-04-25 06:57:43,844",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7444
          },
          {
            "timestamp": "2026-04-25 06:57:43,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7445
          },
          {
            "timestamp": "2026-04-25 06:57:43,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7446
          },
          {
            "timestamp": "2026-04-25 06:57:43,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7447
          },
          {
            "timestamp": "2026-04-25 06:57:43,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7448
          },
          {
            "timestamp": "2026-04-25 06:57:43,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7449
          },
          {
            "timestamp": "2026-04-25 06:57:43,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7450
          },
          {
            "timestamp": "2026-04-25 06:57:43,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7451
          },
          {
            "timestamp": "2026-04-25 06:57:43,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7452
          },
          {
            "timestamp": "2026-04-25 06:57:43,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7453
          },
          {
            "timestamp": "2026-04-25 06:57:43,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7454
          },
          {
            "timestamp": "2026-04-25 06:57:44,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7455
          },
          {
            "timestamp": "2026-04-25 06:57:44,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7456
          },
          {
            "timestamp": "2026-04-25 06:57:44,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7457
          },
          {
            "timestamp": "2026-04-25 06:57:44,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7458
          },
          {
            "timestamp": "2026-04-25 06:57:44,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7459
          },
          {
            "timestamp": "2026-04-25 06:57:44,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7460
          },
          {
            "timestamp": "2026-04-25 06:57:44,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7461
          },
          {
            "timestamp": "2026-04-25 06:57:44,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7462
          },
          {
            "timestamp": "2026-04-25 06:57:44,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7463
          },
          {
            "timestamp": "2026-04-25 06:57:44,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7464
          },
          {
            "timestamp": "2026-04-25 06:57:44,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7465
          },
          {
            "timestamp": "2026-04-25 06:57:44,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7466
          },
          {
            "timestamp": "2026-04-25 06:57:44,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7467
          },
          {
            "timestamp": "2026-04-25 06:57:44,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7468
          },
          {
            "timestamp": "2026-04-25 06:57:44,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7469
          },
          {
            "timestamp": "2026-04-25 06:57:44,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7470
          },
          {
            "timestamp": "2026-04-25 06:57:44,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7471
          },
          {
            "timestamp": "2026-04-25 06:57:44,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7472
          },
          {
            "timestamp": "2026-04-25 06:57:44,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7473
          },
          {
            "timestamp": "2026-04-25 06:57:44,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7474
          },
          {
            "timestamp": "2026-04-25 06:57:44,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7475
          },
          {
            "timestamp": "2026-04-25 06:57:44,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7476
          },
          {
            "timestamp": "2026-04-25 06:57:44,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7477
          },
          {
            "timestamp": "2026-04-25 06:57:44,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7478
          },
          {
            "timestamp": "2026-04-25 06:57:44,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7479
          },
          {
            "timestamp": "2026-04-25 06:57:44,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7480
          },
          {
            "timestamp": "2026-04-25 06:57:44,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7481
          },
          {
            "timestamp": "2026-04-25 06:57:44,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7482
          },
          {
            "timestamp": "2026-04-25 06:57:44,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7483
          },
          {
            "timestamp": "2026-04-25 06:57:44,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7484
          },
          {
            "timestamp": "2026-04-25 06:57:44,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7485
          },
          {
            "timestamp": "2026-04-25 06:57:44,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7486
          },
          {
            "timestamp": "2026-04-25 06:57:44,360",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7487
          },
          {
            "timestamp": "2026-04-25 06:57:44,360",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7488
          },
          {
            "timestamp": "2026-04-25 06:57:44,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7489
          },
          {
            "timestamp": "2026-04-25 06:57:44,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7490
          },
          {
            "timestamp": "2026-04-25 06:57:44,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7491
          },
          {
            "timestamp": "2026-04-25 06:57:44,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7492
          },
          {
            "timestamp": "2026-04-25 06:57:44,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7493
          },
          {
            "timestamp": "2026-04-25 06:57:44,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7494
          },
          {
            "timestamp": "2026-04-25 06:57:44,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7495
          },
          {
            "timestamp": "2026-04-25 06:57:44,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7496
          },
          {
            "timestamp": "2026-04-25 06:57:44,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7497
          },
          {
            "timestamp": "2026-04-25 06:57:44,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7498
          },
          {
            "timestamp": "2026-04-25 06:57:44,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7499
          },
          {
            "timestamp": "2026-04-25 06:57:44,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7500
          },
          {
            "timestamp": "2026-04-25 06:57:44,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7501
          },
          {
            "timestamp": "2026-04-25 06:57:44,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7502
          },
          {
            "timestamp": "2026-04-25 06:57:44,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7503
          },
          {
            "timestamp": "2026-04-25 06:57:44,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7504
          },
          {
            "timestamp": "2026-04-25 06:57:44,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7505
          },
          {
            "timestamp": "2026-04-25 06:57:44,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7506
          },
          {
            "timestamp": "2026-04-25 06:57:44,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7507
          },
          {
            "timestamp": "2026-04-25 06:57:44,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7508
          },
          {
            "timestamp": "2026-04-25 06:57:44,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7509
          },
          {
            "timestamp": "2026-04-25 06:57:44,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7510
          },
          {
            "timestamp": "2026-04-25 06:57:44,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7511
          },
          {
            "timestamp": "2026-04-25 06:57:44,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7512
          },
          {
            "timestamp": "2026-04-25 06:57:44,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7513
          },
          {
            "timestamp": "2026-04-25 06:57:44,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7514
          },
          {
            "timestamp": "2026-04-25 06:57:44,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7515
          },
          {
            "timestamp": "2026-04-25 06:57:44,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7516
          },
          {
            "timestamp": "2026-04-25 06:57:44,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7517
          },
          {
            "timestamp": "2026-04-25 06:57:44,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7518
          },
          {
            "timestamp": "2026-04-25 06:57:44,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7519
          },
          {
            "timestamp": "2026-04-25 06:57:44,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7520
          },
          {
            "timestamp": "2026-04-25 06:57:44,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7521
          },
          {
            "timestamp": "2026-04-25 06:57:44,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7522
          },
          {
            "timestamp": "2026-04-25 06:57:44,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7523
          },
          {
            "timestamp": "2026-04-25 06:57:44,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7524
          },
          {
            "timestamp": "2026-04-25 06:57:44,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7525
          },
          {
            "timestamp": "2026-04-25 06:57:44,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7526
          },
          {
            "timestamp": "2026-04-25 06:57:44,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7527
          },
          {
            "timestamp": "2026-04-25 06:57:44,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7528
          },
          {
            "timestamp": "2026-04-25 06:57:44,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7529
          },
          {
            "timestamp": "2026-04-25 06:57:44,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7530
          },
          {
            "timestamp": "2026-04-25 06:57:44,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7531
          },
          {
            "timestamp": "2026-04-25 06:57:44,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7532
          },
          {
            "timestamp": "2026-04-25 06:57:44,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7533
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7534
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7535
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7536
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7537
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7538
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7539
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7540
          },
          {
            "timestamp": "2026-04-25 06:57:44,876",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7541
          },
          {
            "timestamp": "2026-04-25 06:57:44,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7542
          },
          {
            "timestamp": "2026-04-25 06:57:44,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7543
          },
          {
            "timestamp": "2026-04-25 06:57:44,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7544
          },
          {
            "timestamp": "2026-04-25 06:57:44,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7545
          },
          {
            "timestamp": "2026-04-25 06:57:44,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7546
          },
          {
            "timestamp": "2026-04-25 06:57:44,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7547
          },
          {
            "timestamp": "2026-04-25 06:57:45,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7548
          },
          {
            "timestamp": "2026-04-25 06:57:45,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7549
          },
          {
            "timestamp": "2026-04-25 06:57:45,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7550
          },
          {
            "timestamp": "2026-04-25 06:57:45,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7551
          },
          {
            "timestamp": "2026-04-25 06:57:45,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7552
          },
          {
            "timestamp": "2026-04-25 06:57:45,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7553
          },
          {
            "timestamp": "2026-04-25 06:57:45,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7554
          },
          {
            "timestamp": "2026-04-25 06:57:45,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7555
          },
          {
            "timestamp": "2026-04-25 06:57:45,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7556
          },
          {
            "timestamp": "2026-04-25 06:57:45,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7557
          },
          {
            "timestamp": "2026-04-25 06:57:45,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7558
          },
          {
            "timestamp": "2026-04-25 06:57:45,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7559
          },
          {
            "timestamp": "2026-04-25 06:57:45,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7560
          },
          {
            "timestamp": "2026-04-25 06:57:45,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7561
          },
          {
            "timestamp": "2026-04-25 06:57:45,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7562
          },
          {
            "timestamp": "2026-04-25 06:57:45,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7563
          },
          {
            "timestamp": "2026-04-25 06:57:45,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7564
          },
          {
            "timestamp": "2026-04-25 06:57:45,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7565
          },
          {
            "timestamp": "2026-04-25 06:57:45,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7566
          },
          {
            "timestamp": "2026-04-25 06:57:45,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7567
          },
          {
            "timestamp": "2026-04-25 06:57:45,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7568
          },
          {
            "timestamp": "2026-04-25 06:57:45,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7569
          },
          {
            "timestamp": "2026-04-25 06:57:45,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7570
          },
          {
            "timestamp": "2026-04-25 06:57:45,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7571
          },
          {
            "timestamp": "2026-04-25 06:57:45,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7572
          },
          {
            "timestamp": "2026-04-25 06:57:45,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7573
          },
          {
            "timestamp": "2026-04-25 06:57:45,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7574
          },
          {
            "timestamp": "2026-04-25 06:57:45,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7575
          },
          {
            "timestamp": "2026-04-25 06:57:45,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7576
          },
          {
            "timestamp": "2026-04-25 06:57:45,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7577
          },
          {
            "timestamp": "2026-04-25 06:57:45,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7578
          },
          {
            "timestamp": "2026-04-25 06:57:45,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7579
          },
          {
            "timestamp": "2026-04-25 06:57:45,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7580
          },
          {
            "timestamp": "2026-04-25 06:57:45,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7581
          },
          {
            "timestamp": "2026-04-25 06:57:45,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7582
          },
          {
            "timestamp": "2026-04-25 06:57:45,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7583
          },
          {
            "timestamp": "2026-04-25 06:57:45,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7584
          },
          {
            "timestamp": "2026-04-25 06:57:45,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7585
          },
          {
            "timestamp": "2026-04-25 06:57:45,391",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7586
          },
          {
            "timestamp": "2026-04-25 06:57:45,391",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7587
          },
          {
            "timestamp": "2026-04-25 06:57:45,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7588
          },
          {
            "timestamp": "2026-04-25 06:57:45,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7589
          },
          {
            "timestamp": "2026-04-25 06:57:45,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7590
          },
          {
            "timestamp": "2026-04-25 06:57:45,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7591
          },
          {
            "timestamp": "2026-04-25 06:57:45,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7592
          },
          {
            "timestamp": "2026-04-25 06:57:45,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7593
          },
          {
            "timestamp": "2026-04-25 06:57:45,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7594
          },
          {
            "timestamp": "2026-04-25 06:57:45,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7595
          },
          {
            "timestamp": "2026-04-25 06:57:45,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7596
          },
          {
            "timestamp": "2026-04-25 06:57:45,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7597
          },
          {
            "timestamp": "2026-04-25 06:57:45,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7598
          },
          {
            "timestamp": "2026-04-25 06:57:45,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7599
          },
          {
            "timestamp": "2026-04-25 06:57:45,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7600
          },
          {
            "timestamp": "2026-04-25 06:57:45,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7601
          },
          {
            "timestamp": "2026-04-25 06:57:45,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7602
          },
          {
            "timestamp": "2026-04-25 06:57:45,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7603
          },
          {
            "timestamp": "2026-04-25 06:57:45,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7604
          },
          {
            "timestamp": "2026-04-25 06:57:45,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7605
          },
          {
            "timestamp": "2026-04-25 06:57:45,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7606
          },
          {
            "timestamp": "2026-04-25 06:57:45,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7607
          },
          {
            "timestamp": "2026-04-25 06:57:45,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7608
          },
          {
            "timestamp": "2026-04-25 06:57:45,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7609
          },
          {
            "timestamp": "2026-04-25 06:57:45,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7610
          },
          {
            "timestamp": "2026-04-25 06:57:45,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7611
          },
          {
            "timestamp": "2026-04-25 06:57:45,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7612
          },
          {
            "timestamp": "2026-04-25 06:57:45,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7613
          },
          {
            "timestamp": "2026-04-25 06:57:45,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7614
          },
          {
            "timestamp": "2026-04-25 06:57:45,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7615
          },
          {
            "timestamp": "2026-04-25 06:57:45,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7616
          },
          {
            "timestamp": "2026-04-25 06:57:45,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7617
          },
          {
            "timestamp": "2026-04-25 06:57:45,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7618
          },
          {
            "timestamp": "2026-04-25 06:57:45,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7619
          },
          {
            "timestamp": "2026-04-25 06:57:45,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7620
          },
          {
            "timestamp": "2026-04-25 06:57:45,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7621
          },
          {
            "timestamp": "2026-04-25 06:57:45,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7622
          },
          {
            "timestamp": "2026-04-25 06:57:45,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7623
          },
          {
            "timestamp": "2026-04-25 06:57:45,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7624
          },
          {
            "timestamp": "2026-04-25 06:57:45,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7625
          },
          {
            "timestamp": "2026-04-25 06:57:45,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7626
          },
          {
            "timestamp": "2026-04-25 06:57:45,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7627
          },
          {
            "timestamp": "2026-04-25 06:57:45,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7628
          },
          {
            "timestamp": "2026-04-25 06:57:45,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7629
          },
          {
            "timestamp": "2026-04-25 06:57:45,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7630
          },
          {
            "timestamp": "2026-04-25 06:57:45,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7631
          },
          {
            "timestamp": "2026-04-25 06:57:45,907",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7632
          },
          {
            "timestamp": "2026-04-25 06:57:45,907",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7633
          },
          {
            "timestamp": "2026-04-25 06:57:45,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7634
          },
          {
            "timestamp": "2026-04-25 06:57:45,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7635
          },
          {
            "timestamp": "2026-04-25 06:57:45,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7636
          },
          {
            "timestamp": "2026-04-25 06:57:45,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7637
          },
          {
            "timestamp": "2026-04-25 06:57:45,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7638
          },
          {
            "timestamp": "2026-04-25 06:57:45,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7639
          },
          {
            "timestamp": "2026-04-25 06:57:46,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7640
          },
          {
            "timestamp": "2026-04-25 06:57:46,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7641
          },
          {
            "timestamp": "2026-04-25 06:57:46,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7642
          },
          {
            "timestamp": "2026-04-25 06:57:46,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7643
          },
          {
            "timestamp": "2026-04-25 06:57:46,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7644
          },
          {
            "timestamp": "2026-04-25 06:57:46,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7645
          },
          {
            "timestamp": "2026-04-25 06:57:46,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7646
          },
          {
            "timestamp": "2026-04-25 06:57:46,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7647
          },
          {
            "timestamp": "2026-04-25 06:57:46,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7648
          },
          {
            "timestamp": "2026-04-25 06:57:46,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7649
          },
          {
            "timestamp": "2026-04-25 06:57:46,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7650
          },
          {
            "timestamp": "2026-04-25 06:57:46,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7651
          },
          {
            "timestamp": "2026-04-25 06:57:46,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7652
          },
          {
            "timestamp": "2026-04-25 06:57:46,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7653
          },
          {
            "timestamp": "2026-04-25 06:57:46,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7654
          },
          {
            "timestamp": "2026-04-25 06:57:46,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7655
          },
          {
            "timestamp": "2026-04-25 06:57:46,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7656
          },
          {
            "timestamp": "2026-04-25 06:57:46,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7657
          },
          {
            "timestamp": "2026-04-25 06:57:46,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7658
          },
          {
            "timestamp": "2026-04-25 06:57:46,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7659
          },
          {
            "timestamp": "2026-04-25 06:57:46,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7660
          },
          {
            "timestamp": "2026-04-25 06:57:46,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7661
          },
          {
            "timestamp": "2026-04-25 06:57:46,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7662
          },
          {
            "timestamp": "2026-04-25 06:57:46,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7663
          },
          {
            "timestamp": "2026-04-25 06:57:46,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7664
          },
          {
            "timestamp": "2026-04-25 06:57:46,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7665
          },
          {
            "timestamp": "2026-04-25 06:57:46,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7666
          },
          {
            "timestamp": "2026-04-25 06:57:46,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7667
          },
          {
            "timestamp": "2026-04-25 06:57:46,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7668
          },
          {
            "timestamp": "2026-04-25 06:57:46,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7669
          },
          {
            "timestamp": "2026-04-25 06:57:46,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7670
          },
          {
            "timestamp": "2026-04-25 06:57:46,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7671
          },
          {
            "timestamp": "2026-04-25 06:57:46,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7672
          },
          {
            "timestamp": "2026-04-25 06:57:46,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7673
          },
          {
            "timestamp": "2026-04-25 06:57:46,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7674
          },
          {
            "timestamp": "2026-04-25 06:57:46,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7675
          },
          {
            "timestamp": "2026-04-25 06:57:46,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7676
          },
          {
            "timestamp": "2026-04-25 06:57:46,422",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7677
          },
          {
            "timestamp": "2026-04-25 06:57:46,422",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7678
          },
          {
            "timestamp": "2026-04-25 06:57:46,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7679
          },
          {
            "timestamp": "2026-04-25 06:57:46,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7680
          },
          {
            "timestamp": "2026-04-25 06:57:46,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7681
          },
          {
            "timestamp": "2026-04-25 06:57:46,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7682
          },
          {
            "timestamp": "2026-04-25 06:57:46,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7683
          },
          {
            "timestamp": "2026-04-25 06:57:46,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7684
          },
          {
            "timestamp": "2026-04-25 06:57:46,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7685
          },
          {
            "timestamp": "2026-04-25 06:57:46,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7686
          },
          {
            "timestamp": "2026-04-25 06:57:46,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7687
          },
          {
            "timestamp": "2026-04-25 06:57:46,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7688
          },
          {
            "timestamp": "2026-04-25 06:57:46,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7689
          },
          {
            "timestamp": "2026-04-25 06:57:46,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7690
          },
          {
            "timestamp": "2026-04-25 06:57:46,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7691
          },
          {
            "timestamp": "2026-04-25 06:57:46,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7692
          },
          {
            "timestamp": "2026-04-25 06:57:46,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7693
          },
          {
            "timestamp": "2026-04-25 06:57:46,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7694
          },
          {
            "timestamp": "2026-04-25 06:57:46,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7695
          },
          {
            "timestamp": "2026-04-25 06:57:46,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7696
          },
          {
            "timestamp": "2026-04-25 06:57:46,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7697
          },
          {
            "timestamp": "2026-04-25 06:57:46,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7698
          },
          {
            "timestamp": "2026-04-25 06:57:46,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7699
          },
          {
            "timestamp": "2026-04-25 06:57:46,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7700
          },
          {
            "timestamp": "2026-04-25 06:57:46,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7701
          },
          {
            "timestamp": "2026-04-25 06:57:46,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7702
          },
          {
            "timestamp": "2026-04-25 06:57:46,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7703
          },
          {
            "timestamp": "2026-04-25 06:57:46,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7704
          },
          {
            "timestamp": "2026-04-25 06:57:46,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7705
          },
          {
            "timestamp": "2026-04-25 06:57:46,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7706
          },
          {
            "timestamp": "2026-04-25 06:57:46,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7707
          },
          {
            "timestamp": "2026-04-25 06:57:46,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7708
          },
          {
            "timestamp": "2026-04-25 06:57:46,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7709
          },
          {
            "timestamp": "2026-04-25 06:57:46,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7710
          },
          {
            "timestamp": "2026-04-25 06:57:46,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7711
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7712
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0682d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 7713
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7714
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7715
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7716
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7717
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 7718
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7719
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000588",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1416"
              }
            ],
            "repeated": 0,
            "id": 7720
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1416"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 7721
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1416"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 7722
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 7723
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7724
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7725
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000588"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 7726
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1416"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 7727
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7728
          },
          {
            "timestamp": "2026-04-25 06:57:46,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7729
          },
          {
            "timestamp": "2026-04-25 06:57:46,860",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1416"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 7730
          },
          {
            "timestamp": "2026-04-25 06:57:46,860",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 7731
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 7732
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 7733
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 7734
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7735
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7736
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7737
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7738
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 7739
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7740
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7741
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7742
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7743
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1416"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 7744
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5852",
            "caller": "0x772761f1",
            "parentcaller": "0x73782553",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05782000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 7745
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5852",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000638"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\x10u\\x00T\\x19\\x00\\x00\\xdc\\x16\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "5852"
              }
            ],
            "repeated": 0,
            "id": 7746
          },
          {
            "timestamp": "2026-04-25 06:57:46,876",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1416"
              }
            ],
            "repeated": 0,
            "id": 7747
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 7748
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1416"
              }
            ],
            "repeated": 0,
            "id": 7749
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 7750
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 7751
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7752
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7753
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 7754
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7755
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7756
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7757
          },
          {
            "timestamp": "2026-04-25 06:57:46,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7758
          },
          {
            "timestamp": "2026-04-25 06:57:46,907",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 7759
          },
          {
            "timestamp": "2026-04-25 06:57:46,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7760
          },
          {
            "timestamp": "2026-04-25 06:57:46,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7761
          },
          {
            "timestamp": "2026-04-25 06:57:46,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7762
          },
          {
            "timestamp": "2026-04-25 06:57:46,938",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7763
          },
          {
            "timestamp": "2026-04-25 06:57:46,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7764
          },
          {
            "timestamp": "2026-04-25 06:57:46,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7765
          },
          {
            "timestamp": "2026-04-25 06:57:47,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7766
          },
          {
            "timestamp": "2026-04-25 06:57:47,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7767
          },
          {
            "timestamp": "2026-04-25 06:57:47,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7768
          },
          {
            "timestamp": "2026-04-25 06:57:47,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7769
          },
          {
            "timestamp": "2026-04-25 06:57:47,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7770
          },
          {
            "timestamp": "2026-04-25 06:57:47,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7771
          },
          {
            "timestamp": "2026-04-25 06:57:47,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7772
          },
          {
            "timestamp": "2026-04-25 06:57:47,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7773
          },
          {
            "timestamp": "2026-04-25 06:57:47,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7774
          },
          {
            "timestamp": "2026-04-25 06:57:47,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7775
          },
          {
            "timestamp": "2026-04-25 06:57:47,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7776
          },
          {
            "timestamp": "2026-04-25 06:57:47,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7777
          },
          {
            "timestamp": "2026-04-25 06:57:47,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7778
          },
          {
            "timestamp": "2026-04-25 06:57:47,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7779
          },
          {
            "timestamp": "2026-04-25 06:57:47,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7780
          },
          {
            "timestamp": "2026-04-25 06:57:47,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7781
          },
          {
            "timestamp": "2026-04-25 06:57:47,188",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7782
          },
          {
            "timestamp": "2026-04-25 06:57:47,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7783
          },
          {
            "timestamp": "2026-04-25 06:57:47,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7784
          },
          {
            "timestamp": "2026-04-25 06:57:47,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7785
          },
          {
            "timestamp": "2026-04-25 06:57:47,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7786
          },
          {
            "timestamp": "2026-04-25 06:57:47,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7787
          },
          {
            "timestamp": "2026-04-25 06:57:47,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7788
          },
          {
            "timestamp": "2026-04-25 06:57:47,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7789
          },
          {
            "timestamp": "2026-04-25 06:57:47,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7790
          },
          {
            "timestamp": "2026-04-25 06:57:47,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7791
          },
          {
            "timestamp": "2026-04-25 06:57:47,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7792
          },
          {
            "timestamp": "2026-04-25 06:57:47,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7793
          },
          {
            "timestamp": "2026-04-25 06:57:47,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7794
          },
          {
            "timestamp": "2026-04-25 06:57:47,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7795
          },
          {
            "timestamp": "2026-04-25 06:57:47,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7796
          },
          {
            "timestamp": "2026-04-25 06:57:47,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7797
          },
          {
            "timestamp": "2026-04-25 06:57:47,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7798
          },
          {
            "timestamp": "2026-04-25 06:57:47,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7799
          },
          {
            "timestamp": "2026-04-25 06:57:47,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7800
          },
          {
            "timestamp": "2026-04-25 06:57:47,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7801
          },
          {
            "timestamp": "2026-04-25 06:57:47,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7802
          },
          {
            "timestamp": "2026-04-25 06:57:47,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7803
          },
          {
            "timestamp": "2026-04-25 06:57:47,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7804
          },
          {
            "timestamp": "2026-04-25 06:57:47,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7805
          },
          {
            "timestamp": "2026-04-25 06:57:47,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7806
          },
          {
            "timestamp": "2026-04-25 06:57:47,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7807
          },
          {
            "timestamp": "2026-04-25 06:57:47,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7808
          },
          {
            "timestamp": "2026-04-25 06:57:47,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7809
          },
          {
            "timestamp": "2026-04-25 06:57:47,454",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7810
          },
          {
            "timestamp": "2026-04-25 06:57:47,454",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7811
          },
          {
            "timestamp": "2026-04-25 06:57:47,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7812
          },
          {
            "timestamp": "2026-04-25 06:57:47,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7813
          },
          {
            "timestamp": "2026-04-25 06:57:47,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7814
          },
          {
            "timestamp": "2026-04-25 06:57:47,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7815
          },
          {
            "timestamp": "2026-04-25 06:57:47,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7816
          },
          {
            "timestamp": "2026-04-25 06:57:47,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7817
          },
          {
            "timestamp": "2026-04-25 06:57:47,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7818
          },
          {
            "timestamp": "2026-04-25 06:57:47,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7819
          },
          {
            "timestamp": "2026-04-25 06:57:47,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7820
          },
          {
            "timestamp": "2026-04-25 06:57:47,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7821
          },
          {
            "timestamp": "2026-04-25 06:57:47,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7822
          },
          {
            "timestamp": "2026-04-25 06:57:47,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7823
          },
          {
            "timestamp": "2026-04-25 06:57:47,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7824
          },
          {
            "timestamp": "2026-04-25 06:57:47,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7825
          },
          {
            "timestamp": "2026-04-25 06:57:47,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7826
          },
          {
            "timestamp": "2026-04-25 06:57:47,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7827
          },
          {
            "timestamp": "2026-04-25 06:57:47,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7828
          },
          {
            "timestamp": "2026-04-25 06:57:47,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7829
          },
          {
            "timestamp": "2026-04-25 06:57:47,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7830
          },
          {
            "timestamp": "2026-04-25 06:57:47,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7831
          },
          {
            "timestamp": "2026-04-25 06:57:47,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7832
          },
          {
            "timestamp": "2026-04-25 06:57:47,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7833
          },
          {
            "timestamp": "2026-04-25 06:57:47,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7834
          },
          {
            "timestamp": "2026-04-25 06:57:47,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7835
          },
          {
            "timestamp": "2026-04-25 06:57:47,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7836
          },
          {
            "timestamp": "2026-04-25 06:57:47,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7837
          },
          {
            "timestamp": "2026-04-25 06:57:47,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7838
          },
          {
            "timestamp": "2026-04-25 06:57:47,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7839
          },
          {
            "timestamp": "2026-04-25 06:57:47,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7840
          },
          {
            "timestamp": "2026-04-25 06:57:47,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7841
          },
          {
            "timestamp": "2026-04-25 06:57:47,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7842
          },
          {
            "timestamp": "2026-04-25 06:57:47,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7843
          },
          {
            "timestamp": "2026-04-25 06:57:47,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7844
          },
          {
            "timestamp": "2026-04-25 06:57:47,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7845
          },
          {
            "timestamp": "2026-04-25 06:57:47,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7846
          },
          {
            "timestamp": "2026-04-25 06:57:47,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7847
          },
          {
            "timestamp": "2026-04-25 06:57:47,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7848
          },
          {
            "timestamp": "2026-04-25 06:57:47,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7849
          },
          {
            "timestamp": "2026-04-25 06:57:47,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7850
          },
          {
            "timestamp": "2026-04-25 06:57:47,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7851
          },
          {
            "timestamp": "2026-04-25 06:57:47,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7852
          },
          {
            "timestamp": "2026-04-25 06:57:47,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7853
          },
          {
            "timestamp": "2026-04-25 06:57:47,969",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7854
          },
          {
            "timestamp": "2026-04-25 06:57:47,969",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7855
          },
          {
            "timestamp": "2026-04-25 06:57:48,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7856
          },
          {
            "timestamp": "2026-04-25 06:57:48,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7857
          },
          {
            "timestamp": "2026-04-25 06:57:48,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7858
          },
          {
            "timestamp": "2026-04-25 06:57:48,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7859
          },
          {
            "timestamp": "2026-04-25 06:57:48,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7860
          },
          {
            "timestamp": "2026-04-25 06:57:48,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7861
          },
          {
            "timestamp": "2026-04-25 06:57:48,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7862
          },
          {
            "timestamp": "2026-04-25 06:57:48,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7863
          },
          {
            "timestamp": "2026-04-25 06:57:48,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7864
          },
          {
            "timestamp": "2026-04-25 06:57:48,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7865
          },
          {
            "timestamp": "2026-04-25 06:57:48,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7866
          },
          {
            "timestamp": "2026-04-25 06:57:48,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7867
          },
          {
            "timestamp": "2026-04-25 06:57:48,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7868
          },
          {
            "timestamp": "2026-04-25 06:57:48,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7869
          },
          {
            "timestamp": "2026-04-25 06:57:48,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7870
          },
          {
            "timestamp": "2026-04-25 06:57:48,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 7871
          },
          {
            "timestamp": "2026-04-25 06:57:48,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7872
          },
          {
            "timestamp": "2026-04-25 06:57:48,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7873
          },
          {
            "timestamp": "2026-04-25 06:57:48,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7874
          },
          {
            "timestamp": "2026-04-25 06:57:48,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7875
          },
          {
            "timestamp": "2026-04-25 06:57:48,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7876
          },
          {
            "timestamp": "2026-04-25 06:57:48,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7877
          },
          {
            "timestamp": "2026-04-25 06:57:48,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7878
          },
          {
            "timestamp": "2026-04-25 06:57:48,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7879
          },
          {
            "timestamp": "2026-04-25 06:57:48,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7880
          },
          {
            "timestamp": "2026-04-25 06:57:48,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7881
          },
          {
            "timestamp": "2026-04-25 06:57:48,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7882
          },
          {
            "timestamp": "2026-04-25 06:57:48,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7883
          },
          {
            "timestamp": "2026-04-25 06:57:48,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7884
          },
          {
            "timestamp": "2026-04-25 06:57:48,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7885
          },
          {
            "timestamp": "2026-04-25 06:57:48,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7886
          },
          {
            "timestamp": "2026-04-25 06:57:48,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7887
          },
          {
            "timestamp": "2026-04-25 06:57:48,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7888
          },
          {
            "timestamp": "2026-04-25 06:57:48,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7889
          },
          {
            "timestamp": "2026-04-25 06:57:48,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7890
          },
          {
            "timestamp": "2026-04-25 06:57:48,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7891
          },
          {
            "timestamp": "2026-04-25 06:57:48,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7892
          },
          {
            "timestamp": "2026-04-25 06:57:48,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7893
          },
          {
            "timestamp": "2026-04-25 06:57:48,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7894
          },
          {
            "timestamp": "2026-04-25 06:57:48,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7895
          },
          {
            "timestamp": "2026-04-25 06:57:48,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7896
          },
          {
            "timestamp": "2026-04-25 06:57:48,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7897
          },
          {
            "timestamp": "2026-04-25 06:57:48,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7898
          },
          {
            "timestamp": "2026-04-25 06:57:48,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7899
          },
          {
            "timestamp": "2026-04-25 06:57:48,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7900
          },
          {
            "timestamp": "2026-04-25 06:57:48,485",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7901
          },
          {
            "timestamp": "2026-04-25 06:57:48,485",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7902
          },
          {
            "timestamp": "2026-04-25 06:57:48,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7903
          },
          {
            "timestamp": "2026-04-25 06:57:48,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7904
          },
          {
            "timestamp": "2026-04-25 06:57:48,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7905
          },
          {
            "timestamp": "2026-04-25 06:57:48,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7906
          },
          {
            "timestamp": "2026-04-25 06:57:48,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7907
          },
          {
            "timestamp": "2026-04-25 06:57:48,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7908
          },
          {
            "timestamp": "2026-04-25 06:57:48,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7909
          },
          {
            "timestamp": "2026-04-25 06:57:48,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7910
          },
          {
            "timestamp": "2026-04-25 06:57:48,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7911
          },
          {
            "timestamp": "2026-04-25 06:57:48,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7912
          },
          {
            "timestamp": "2026-04-25 06:57:48,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7913
          },
          {
            "timestamp": "2026-04-25 06:57:48,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7914
          },
          {
            "timestamp": "2026-04-25 06:57:48,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7915
          },
          {
            "timestamp": "2026-04-25 06:57:48,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7916
          },
          {
            "timestamp": "2026-04-25 06:57:48,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7917
          },
          {
            "timestamp": "2026-04-25 06:57:48,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7918
          },
          {
            "timestamp": "2026-04-25 06:57:48,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7919
          },
          {
            "timestamp": "2026-04-25 06:57:48,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7920
          },
          {
            "timestamp": "2026-04-25 06:57:48,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7921
          },
          {
            "timestamp": "2026-04-25 06:57:48,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7922
          },
          {
            "timestamp": "2026-04-25 06:57:48,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7923
          },
          {
            "timestamp": "2026-04-25 06:57:48,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7924
          },
          {
            "timestamp": "2026-04-25 06:57:48,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7925
          },
          {
            "timestamp": "2026-04-25 06:57:48,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7926
          },
          {
            "timestamp": "2026-04-25 06:57:48,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7927
          },
          {
            "timestamp": "2026-04-25 06:57:48,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7928
          },
          {
            "timestamp": "2026-04-25 06:57:48,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7929
          },
          {
            "timestamp": "2026-04-25 06:57:48,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7930
          },
          {
            "timestamp": "2026-04-25 06:57:48,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7931
          },
          {
            "timestamp": "2026-04-25 06:57:48,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7932
          },
          {
            "timestamp": "2026-04-25 06:57:48,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7933
          },
          {
            "timestamp": "2026-04-25 06:57:48,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7934
          },
          {
            "timestamp": "2026-04-25 06:57:48,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7935
          },
          {
            "timestamp": "2026-04-25 06:57:48,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7936
          },
          {
            "timestamp": "2026-04-25 06:57:48,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7937
          },
          {
            "timestamp": "2026-04-25 06:57:48,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7938
          },
          {
            "timestamp": "2026-04-25 06:57:48,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7939
          },
          {
            "timestamp": "2026-04-25 06:57:48,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7940
          },
          {
            "timestamp": "2026-04-25 06:57:48,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7941
          },
          {
            "timestamp": "2026-04-25 06:57:48,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7942
          },
          {
            "timestamp": "2026-04-25 06:57:48,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7943
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7944
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7945
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7946
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7947
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7948
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7949
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7950
          },
          {
            "timestamp": "2026-04-25 06:57:49,001",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7951
          },
          {
            "timestamp": "2026-04-25 06:57:49,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7952
          },
          {
            "timestamp": "2026-04-25 06:57:49,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7953
          },
          {
            "timestamp": "2026-04-25 06:57:49,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7954
          },
          {
            "timestamp": "2026-04-25 06:57:49,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7955
          },
          {
            "timestamp": "2026-04-25 06:57:49,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7956
          },
          {
            "timestamp": "2026-04-25 06:57:49,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7957
          },
          {
            "timestamp": "2026-04-25 06:57:49,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7958
          },
          {
            "timestamp": "2026-04-25 06:57:49,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7959
          },
          {
            "timestamp": "2026-04-25 06:57:49,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7960
          },
          {
            "timestamp": "2026-04-25 06:57:49,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7961
          },
          {
            "timestamp": "2026-04-25 06:57:49,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7962
          },
          {
            "timestamp": "2026-04-25 06:57:49,188",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7963
          },
          {
            "timestamp": "2026-04-25 06:57:49,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7964
          },
          {
            "timestamp": "2026-04-25 06:57:49,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7965
          },
          {
            "timestamp": "2026-04-25 06:57:49,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7966
          },
          {
            "timestamp": "2026-04-25 06:57:49,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7967
          },
          {
            "timestamp": "2026-04-25 06:57:49,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7968
          },
          {
            "timestamp": "2026-04-25 06:57:49,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7969
          },
          {
            "timestamp": "2026-04-25 06:57:49,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7970
          },
          {
            "timestamp": "2026-04-25 06:57:49,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7971
          },
          {
            "timestamp": "2026-04-25 06:57:49,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7972
          },
          {
            "timestamp": "2026-04-25 06:57:49,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7973
          },
          {
            "timestamp": "2026-04-25 06:57:49,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7974
          },
          {
            "timestamp": "2026-04-25 06:57:49,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7975
          },
          {
            "timestamp": "2026-04-25 06:57:49,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7976
          },
          {
            "timestamp": "2026-04-25 06:57:49,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7977
          },
          {
            "timestamp": "2026-04-25 06:57:49,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7978
          },
          {
            "timestamp": "2026-04-25 06:57:49,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7979
          },
          {
            "timestamp": "2026-04-25 06:57:49,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7980
          },
          {
            "timestamp": "2026-04-25 06:57:49,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7981
          },
          {
            "timestamp": "2026-04-25 06:57:49,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7982
          },
          {
            "timestamp": "2026-04-25 06:57:49,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7983
          },
          {
            "timestamp": "2026-04-25 06:57:49,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7984
          },
          {
            "timestamp": "2026-04-25 06:57:49,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7985
          },
          {
            "timestamp": "2026-04-25 06:57:49,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7986
          },
          {
            "timestamp": "2026-04-25 06:57:49,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7987
          },
          {
            "timestamp": "2026-04-25 06:57:49,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7988
          },
          {
            "timestamp": "2026-04-25 06:57:49,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7989
          },
          {
            "timestamp": "2026-04-25 06:57:49,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7990
          },
          {
            "timestamp": "2026-04-25 06:57:49,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 7991
          },
          {
            "timestamp": "2026-04-25 06:57:49,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7992
          },
          {
            "timestamp": "2026-04-25 06:57:49,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7993
          },
          {
            "timestamp": "2026-04-25 06:57:49,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7994
          },
          {
            "timestamp": "2026-04-25 06:57:49,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 7995
          },
          {
            "timestamp": "2026-04-25 06:57:49,516",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 7996
          },
          {
            "timestamp": "2026-04-25 06:57:49,516",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 7997
          },
          {
            "timestamp": "2026-04-25 06:57:49,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 7998
          },
          {
            "timestamp": "2026-04-25 06:57:49,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 7999
          },
          {
            "timestamp": "2026-04-25 06:57:49,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8000
          },
          {
            "timestamp": "2026-04-25 06:57:49,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8001
          },
          {
            "timestamp": "2026-04-25 06:57:49,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8002
          },
          {
            "timestamp": "2026-04-25 06:57:49,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8003
          },
          {
            "timestamp": "2026-04-25 06:57:49,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8004
          },
          {
            "timestamp": "2026-04-25 06:57:49,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8005
          },
          {
            "timestamp": "2026-04-25 06:57:49,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8006
          },
          {
            "timestamp": "2026-04-25 06:57:49,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8007
          },
          {
            "timestamp": "2026-04-25 06:57:49,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8008
          },
          {
            "timestamp": "2026-04-25 06:57:49,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8009
          },
          {
            "timestamp": "2026-04-25 06:57:49,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8010
          },
          {
            "timestamp": "2026-04-25 06:57:49,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8011
          },
          {
            "timestamp": "2026-04-25 06:57:49,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8012
          },
          {
            "timestamp": "2026-04-25 06:57:49,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8013
          },
          {
            "timestamp": "2026-04-25 06:57:49,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8014
          },
          {
            "timestamp": "2026-04-25 06:57:49,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8015
          },
          {
            "timestamp": "2026-04-25 06:57:49,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8016
          },
          {
            "timestamp": "2026-04-25 06:57:49,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8017
          },
          {
            "timestamp": "2026-04-25 06:57:49,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8018
          },
          {
            "timestamp": "2026-04-25 06:57:49,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8019
          },
          {
            "timestamp": "2026-04-25 06:57:49,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8020
          },
          {
            "timestamp": "2026-04-25 06:57:49,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8021
          },
          {
            "timestamp": "2026-04-25 06:57:49,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8022
          },
          {
            "timestamp": "2026-04-25 06:57:49,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8023
          },
          {
            "timestamp": "2026-04-25 06:57:49,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8024
          },
          {
            "timestamp": "2026-04-25 06:57:49,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8025
          },
          {
            "timestamp": "2026-04-25 06:57:49,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8026
          },
          {
            "timestamp": "2026-04-25 06:57:49,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8027
          },
          {
            "timestamp": "2026-04-25 06:57:49,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8028
          },
          {
            "timestamp": "2026-04-25 06:57:49,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8029
          },
          {
            "timestamp": "2026-04-25 06:57:49,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8030
          },
          {
            "timestamp": "2026-04-25 06:57:49,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8031
          },
          {
            "timestamp": "2026-04-25 06:57:50,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8032
          },
          {
            "timestamp": "2026-04-25 06:57:50,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8033
          },
          {
            "timestamp": "2026-04-25 06:57:50,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8034
          },
          {
            "timestamp": "2026-04-25 06:57:50,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8035
          },
          {
            "timestamp": "2026-04-25 06:57:50,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8036
          },
          {
            "timestamp": "2026-04-25 06:57:50,032",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8037
          },
          {
            "timestamp": "2026-04-25 06:57:50,032",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8038
          },
          {
            "timestamp": "2026-04-25 06:57:50,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8039
          },
          {
            "timestamp": "2026-04-25 06:57:50,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8040
          },
          {
            "timestamp": "2026-04-25 06:57:50,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8041
          },
          {
            "timestamp": "2026-04-25 06:57:50,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8042
          },
          {
            "timestamp": "2026-04-25 06:57:50,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8043
          },
          {
            "timestamp": "2026-04-25 06:57:50,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8044
          },
          {
            "timestamp": "2026-04-25 06:57:50,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8045
          },
          {
            "timestamp": "2026-04-25 06:57:50,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8046
          },
          {
            "timestamp": "2026-04-25 06:57:50,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8047
          },
          {
            "timestamp": "2026-04-25 06:57:50,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8048
          },
          {
            "timestamp": "2026-04-25 06:57:50,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8049
          },
          {
            "timestamp": "2026-04-25 06:57:50,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8050
          },
          {
            "timestamp": "2026-04-25 06:57:50,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8051
          },
          {
            "timestamp": "2026-04-25 06:57:50,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8052
          },
          {
            "timestamp": "2026-04-25 06:57:50,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8053
          },
          {
            "timestamp": "2026-04-25 06:57:50,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8054
          },
          {
            "timestamp": "2026-04-25 06:57:50,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8055
          },
          {
            "timestamp": "2026-04-25 06:57:50,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8056
          },
          {
            "timestamp": "2026-04-25 06:57:50,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8057
          },
          {
            "timestamp": "2026-04-25 06:57:50,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8058
          },
          {
            "timestamp": "2026-04-25 06:57:50,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8059
          },
          {
            "timestamp": "2026-04-25 06:57:50,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8060
          },
          {
            "timestamp": "2026-04-25 06:57:50,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8061
          },
          {
            "timestamp": "2026-04-25 06:57:50,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8062
          },
          {
            "timestamp": "2026-04-25 06:57:50,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8063
          },
          {
            "timestamp": "2026-04-25 06:57:50,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8064
          },
          {
            "timestamp": "2026-04-25 06:57:50,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8065
          },
          {
            "timestamp": "2026-04-25 06:57:50,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8066
          },
          {
            "timestamp": "2026-04-25 06:57:50,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8067
          },
          {
            "timestamp": "2026-04-25 06:57:50,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8068
          },
          {
            "timestamp": "2026-04-25 06:57:50,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8069
          },
          {
            "timestamp": "2026-04-25 06:57:50,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8070
          },
          {
            "timestamp": "2026-04-25 06:57:50,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8071
          },
          {
            "timestamp": "2026-04-25 06:57:50,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8072
          },
          {
            "timestamp": "2026-04-25 06:57:50,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8073
          },
          {
            "timestamp": "2026-04-25 06:57:50,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8074
          },
          {
            "timestamp": "2026-04-25 06:57:50,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8075
          },
          {
            "timestamp": "2026-04-25 06:57:50,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8076
          },
          {
            "timestamp": "2026-04-25 06:57:50,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8077
          },
          {
            "timestamp": "2026-04-25 06:57:50,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8078
          },
          {
            "timestamp": "2026-04-25 06:57:50,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8079
          },
          {
            "timestamp": "2026-04-25 06:57:50,547",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8080
          },
          {
            "timestamp": "2026-04-25 06:57:50,547",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8081
          },
          {
            "timestamp": "2026-04-25 06:57:50,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8082
          },
          {
            "timestamp": "2026-04-25 06:57:50,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8083
          },
          {
            "timestamp": "2026-04-25 06:57:50,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8084
          },
          {
            "timestamp": "2026-04-25 06:57:50,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8085
          },
          {
            "timestamp": "2026-04-25 06:57:50,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8086
          },
          {
            "timestamp": "2026-04-25 06:57:50,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8087
          },
          {
            "timestamp": "2026-04-25 06:57:50,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8088
          },
          {
            "timestamp": "2026-04-25 06:57:50,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8089
          },
          {
            "timestamp": "2026-04-25 06:57:50,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8090
          },
          {
            "timestamp": "2026-04-25 06:57:50,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8091
          },
          {
            "timestamp": "2026-04-25 06:57:50,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8092
          },
          {
            "timestamp": "2026-04-25 06:57:50,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8093
          },
          {
            "timestamp": "2026-04-25 06:57:50,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8094
          },
          {
            "timestamp": "2026-04-25 06:57:50,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8095
          },
          {
            "timestamp": "2026-04-25 06:57:50,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8096
          },
          {
            "timestamp": "2026-04-25 06:57:50,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8097
          },
          {
            "timestamp": "2026-04-25 06:57:50,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8098
          },
          {
            "timestamp": "2026-04-25 06:57:50,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8099
          },
          {
            "timestamp": "2026-04-25 06:57:50,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8100
          },
          {
            "timestamp": "2026-04-25 06:57:50,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8101
          },
          {
            "timestamp": "2026-04-25 06:57:50,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8102
          },
          {
            "timestamp": "2026-04-25 06:57:50,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8103
          },
          {
            "timestamp": "2026-04-25 06:57:50,829",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8104
          },
          {
            "timestamp": "2026-04-25 06:57:50,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8105
          },
          {
            "timestamp": "2026-04-25 06:57:50,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8106
          },
          {
            "timestamp": "2026-04-25 06:57:50,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8107
          },
          {
            "timestamp": "2026-04-25 06:57:50,891",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8108
          },
          {
            "timestamp": "2026-04-25 06:57:50,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8109
          },
          {
            "timestamp": "2026-04-25 06:57:50,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8110
          },
          {
            "timestamp": "2026-04-25 06:57:50,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8111
          },
          {
            "timestamp": "2026-04-25 06:57:50,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8112
          },
          {
            "timestamp": "2026-04-25 06:57:50,907",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8113
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0684d000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 8114
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8115
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 8116
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8117
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000003e4",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "996"
              }
            ],
            "repeated": 0,
            "id": 8118
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 8119
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 8120
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003e4"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 8121
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 8122
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 8123
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8124
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8125
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8126
          },
          {
            "timestamp": "2026-04-25 06:57:50,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8127
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8128
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8129
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8130
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8131
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8132
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8133
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 8134
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 8135
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 8136
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 8137
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 8138
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 8139
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "996"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 8140
          },
          {
            "timestamp": "2026-04-25 06:57:50,954",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              }
            ],
            "repeated": 0,
            "id": 8141
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8142
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8143
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 8144
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "5852",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              }
            ],
            "repeated": 0,
            "id": 8145
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "5852",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 8146
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "5852",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 8147
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8148
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8149
          },
          {
            "timestamp": "2026-04-25 06:57:50,969",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 8150
          },
          {
            "timestamp": "2026-04-25 06:57:50,985",
            "thread_id": "5852",
            "caller": "0x050759c3",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 10,
            "id": 8151
          },
          {
            "timestamp": "2026-04-25 06:57:50,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8152
          },
          {
            "timestamp": "2026-04-25 06:57:50,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8153
          },
          {
            "timestamp": "2026-04-25 06:57:50,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8154
          },
          {
            "timestamp": "2026-04-25 06:57:51,016",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8155
          },
          {
            "timestamp": "2026-04-25 06:57:51,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8156
          },
          {
            "timestamp": "2026-04-25 06:57:51,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8157
          },
          {
            "timestamp": "2026-04-25 06:57:51,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8158
          },
          {
            "timestamp": "2026-04-25 06:57:51,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8159
          },
          {
            "timestamp": "2026-04-25 06:57:51,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8160
          },
          {
            "timestamp": "2026-04-25 06:57:51,063",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8161
          },
          {
            "timestamp": "2026-04-25 06:57:51,063",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8162
          },
          {
            "timestamp": "2026-04-25 06:57:51,079",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8163
          },
          {
            "timestamp": "2026-04-25 06:57:51,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8164
          },
          {
            "timestamp": "2026-04-25 06:57:51,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8165
          },
          {
            "timestamp": "2026-04-25 06:57:51,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8166
          },
          {
            "timestamp": "2026-04-25 06:57:51,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8167
          },
          {
            "timestamp": "2026-04-25 06:57:51,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8168
          },
          {
            "timestamp": "2026-04-25 06:57:51,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8169
          },
          {
            "timestamp": "2026-04-25 06:57:51,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8170
          },
          {
            "timestamp": "2026-04-25 06:57:51,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 8171
          },
          {
            "timestamp": "2026-04-25 06:57:51,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8172
          },
          {
            "timestamp": "2026-04-25 06:57:51,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8173
          },
          {
            "timestamp": "2026-04-25 06:57:51,204",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8174
          },
          {
            "timestamp": "2026-04-25 06:57:51,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8175
          },
          {
            "timestamp": "2026-04-25 06:57:51,204",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8176
          },
          {
            "timestamp": "2026-04-25 06:57:51,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8177
          },
          {
            "timestamp": "2026-04-25 06:57:51,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8178
          },
          {
            "timestamp": "2026-04-25 06:57:51,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8179
          },
          {
            "timestamp": "2026-04-25 06:57:51,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8180
          },
          {
            "timestamp": "2026-04-25 06:57:51,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8181
          },
          {
            "timestamp": "2026-04-25 06:57:51,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8182
          },
          {
            "timestamp": "2026-04-25 06:57:51,266",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8183
          },
          {
            "timestamp": "2026-04-25 06:57:51,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8184
          },
          {
            "timestamp": "2026-04-25 06:57:51,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8185
          },
          {
            "timestamp": "2026-04-25 06:57:51,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8186
          },
          {
            "timestamp": "2026-04-25 06:57:51,329",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8187
          },
          {
            "timestamp": "2026-04-25 06:57:51,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8188
          },
          {
            "timestamp": "2026-04-25 06:57:51,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8189
          },
          {
            "timestamp": "2026-04-25 06:57:51,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8190
          },
          {
            "timestamp": "2026-04-25 06:57:51,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8191
          },
          {
            "timestamp": "2026-04-25 06:57:51,391",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8192
          },
          {
            "timestamp": "2026-04-25 06:57:51,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8193
          },
          {
            "timestamp": "2026-04-25 06:57:51,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8194
          },
          {
            "timestamp": "2026-04-25 06:57:51,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8195
          },
          {
            "timestamp": "2026-04-25 06:57:51,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8196
          },
          {
            "timestamp": "2026-04-25 06:57:51,454",
            "thread_id": "1416",
            "caller": "0x0507b7c3",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x05792000"
              },
              {
                "name": "RegionSize",
                "value": "0x00010000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 8197
          },
          {
            "timestamp": "2026-04-25 06:57:51,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8198
          },
          {
            "timestamp": "2026-04-25 06:57:51,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8199
          },
          {
            "timestamp": "2026-04-25 06:57:51,454",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8200
          },
          {
            "timestamp": "2026-04-25 06:57:51,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8201
          },
          {
            "timestamp": "2026-04-25 06:57:51,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8202
          },
          {
            "timestamp": "2026-04-25 06:57:51,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8203
          },
          {
            "timestamp": "2026-04-25 06:57:51,516",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8204
          },
          {
            "timestamp": "2026-04-25 06:57:51,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8205
          },
          {
            "timestamp": "2026-04-25 06:57:51,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8206
          },
          {
            "timestamp": "2026-04-25 06:57:51,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8207
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8208
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8209
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8210
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8211
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8212
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8213
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8214
          },
          {
            "timestamp": "2026-04-25 06:57:51,579",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8215
          },
          {
            "timestamp": "2026-04-25 06:57:51,641",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8216
          },
          {
            "timestamp": "2026-04-25 06:57:51,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8217
          },
          {
            "timestamp": "2026-04-25 06:57:51,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8218
          },
          {
            "timestamp": "2026-04-25 06:57:51,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8219
          },
          {
            "timestamp": "2026-04-25 06:57:51,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8220
          },
          {
            "timestamp": "2026-04-25 06:57:51,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8221
          },
          {
            "timestamp": "2026-04-25 06:57:51,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8222
          },
          {
            "timestamp": "2026-04-25 06:57:51,704",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8223
          },
          {
            "timestamp": "2026-04-25 06:57:51,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8224
          },
          {
            "timestamp": "2026-04-25 06:57:51,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8225
          },
          {
            "timestamp": "2026-04-25 06:57:51,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8226
          },
          {
            "timestamp": "2026-04-25 06:57:51,766",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8227
          },
          {
            "timestamp": "2026-04-25 06:57:51,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8228
          },
          {
            "timestamp": "2026-04-25 06:57:51,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8229
          },
          {
            "timestamp": "2026-04-25 06:57:51,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8230
          },
          {
            "timestamp": "2026-04-25 06:57:51,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8231
          },
          {
            "timestamp": "2026-04-25 06:57:51,829",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8232
          },
          {
            "timestamp": "2026-04-25 06:57:51,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8233
          },
          {
            "timestamp": "2026-04-25 06:57:51,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8234
          },
          {
            "timestamp": "2026-04-25 06:57:51,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8235
          },
          {
            "timestamp": "2026-04-25 06:57:51,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8236
          },
          {
            "timestamp": "2026-04-25 06:57:51,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8237
          },
          {
            "timestamp": "2026-04-25 06:57:51,891",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8238
          },
          {
            "timestamp": "2026-04-25 06:57:51,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8239
          },
          {
            "timestamp": "2026-04-25 06:57:51,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8240
          },
          {
            "timestamp": "2026-04-25 06:57:51,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8241
          },
          {
            "timestamp": "2026-04-25 06:57:51,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8242
          },
          {
            "timestamp": "2026-04-25 06:57:51,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8243
          },
          {
            "timestamp": "2026-04-25 06:57:51,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8244
          },
          {
            "timestamp": "2026-04-25 06:57:51,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8245
          },
          {
            "timestamp": "2026-04-25 06:57:51,954",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8246
          },
          {
            "timestamp": "2026-04-25 06:57:51,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8247
          },
          {
            "timestamp": "2026-04-25 06:57:51,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8248
          },
          {
            "timestamp": "2026-04-25 06:57:51,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8249
          },
          {
            "timestamp": "2026-04-25 06:57:52,016",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8250
          },
          {
            "timestamp": "2026-04-25 06:57:52,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8251
          },
          {
            "timestamp": "2026-04-25 06:57:52,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8252
          },
          {
            "timestamp": "2026-04-25 06:57:52,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8253
          },
          {
            "timestamp": "2026-04-25 06:57:52,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8254
          },
          {
            "timestamp": "2026-04-25 06:57:52,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8255
          },
          {
            "timestamp": "2026-04-25 06:57:52,079",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8256
          },
          {
            "timestamp": "2026-04-25 06:57:52,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8257
          },
          {
            "timestamp": "2026-04-25 06:57:52,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8258
          },
          {
            "timestamp": "2026-04-25 06:57:52,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8259
          },
          {
            "timestamp": "2026-04-25 06:57:52,094",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8260
          },
          {
            "timestamp": "2026-04-25 06:57:52,094",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8261
          },
          {
            "timestamp": "2026-04-25 06:57:52,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8262
          },
          {
            "timestamp": "2026-04-25 06:57:52,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8263
          },
          {
            "timestamp": "2026-04-25 06:57:52,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8264
          },
          {
            "timestamp": "2026-04-25 06:57:52,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8265
          },
          {
            "timestamp": "2026-04-25 06:57:52,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8266
          },
          {
            "timestamp": "2026-04-25 06:57:52,204",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8267
          },
          {
            "timestamp": "2026-04-25 06:57:52,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8268
          },
          {
            "timestamp": "2026-04-25 06:57:52,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8269
          },
          {
            "timestamp": "2026-04-25 06:57:52,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8270
          },
          {
            "timestamp": "2026-04-25 06:57:52,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8271
          },
          {
            "timestamp": "2026-04-25 06:57:52,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8272
          },
          {
            "timestamp": "2026-04-25 06:57:52,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8273
          },
          {
            "timestamp": "2026-04-25 06:57:52,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8274
          },
          {
            "timestamp": "2026-04-25 06:57:52,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8275
          },
          {
            "timestamp": "2026-04-25 06:57:52,266",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8276
          },
          {
            "timestamp": "2026-04-25 06:57:52,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8277
          },
          {
            "timestamp": "2026-04-25 06:57:52,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8278
          },
          {
            "timestamp": "2026-04-25 06:57:52,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8279
          },
          {
            "timestamp": "2026-04-25 06:57:52,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8280
          },
          {
            "timestamp": "2026-04-25 06:57:52,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8281
          },
          {
            "timestamp": "2026-04-25 06:57:52,329",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8282
          },
          {
            "timestamp": "2026-04-25 06:57:52,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8283
          },
          {
            "timestamp": "2026-04-25 06:57:52,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8284
          },
          {
            "timestamp": "2026-04-25 06:57:52,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8285
          },
          {
            "timestamp": "2026-04-25 06:57:52,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8286
          },
          {
            "timestamp": "2026-04-25 06:57:52,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8287
          },
          {
            "timestamp": "2026-04-25 06:57:52,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8288
          },
          {
            "timestamp": "2026-04-25 06:57:52,391",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8289
          },
          {
            "timestamp": "2026-04-25 06:57:52,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8290
          },
          {
            "timestamp": "2026-04-25 06:57:52,454",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8291
          },
          {
            "timestamp": "2026-04-25 06:57:52,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8292
          },
          {
            "timestamp": "2026-04-25 06:57:52,516",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8293
          },
          {
            "timestamp": "2026-04-25 06:57:52,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8294
          },
          {
            "timestamp": "2026-04-25 06:57:52,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8295
          },
          {
            "timestamp": "2026-04-25 06:57:52,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8296
          },
          {
            "timestamp": "2026-04-25 06:57:52,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8297
          },
          {
            "timestamp": "2026-04-25 06:57:52,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8298
          },
          {
            "timestamp": "2026-04-25 06:57:52,579",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8299
          },
          {
            "timestamp": "2026-04-25 06:57:52,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8300
          },
          {
            "timestamp": "2026-04-25 06:57:52,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8301
          },
          {
            "timestamp": "2026-04-25 06:57:52,610",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8302
          },
          {
            "timestamp": "2026-04-25 06:57:52,610",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8303
          },
          {
            "timestamp": "2026-04-25 06:57:52,641",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8304
          },
          {
            "timestamp": "2026-04-25 06:57:52,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8305
          },
          {
            "timestamp": "2026-04-25 06:57:52,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8306
          },
          {
            "timestamp": "2026-04-25 06:57:52,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8307
          },
          {
            "timestamp": "2026-04-25 06:57:52,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8308
          },
          {
            "timestamp": "2026-04-25 06:57:52,704",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8309
          },
          {
            "timestamp": "2026-04-25 06:57:52,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8310
          },
          {
            "timestamp": "2026-04-25 06:57:52,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8311
          },
          {
            "timestamp": "2026-04-25 06:57:52,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8312
          },
          {
            "timestamp": "2026-04-25 06:57:52,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8313
          },
          {
            "timestamp": "2026-04-25 06:57:52,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8314
          },
          {
            "timestamp": "2026-04-25 06:57:52,766",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8315
          },
          {
            "timestamp": "2026-04-25 06:57:52,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8316
          },
          {
            "timestamp": "2026-04-25 06:57:52,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8317
          },
          {
            "timestamp": "2026-04-25 06:57:52,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8318
          },
          {
            "timestamp": "2026-04-25 06:57:52,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8319
          },
          {
            "timestamp": "2026-04-25 06:57:52,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8320
          },
          {
            "timestamp": "2026-04-25 06:57:52,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8321
          },
          {
            "timestamp": "2026-04-25 06:57:52,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8322
          },
          {
            "timestamp": "2026-04-25 06:57:52,891",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8323
          },
          {
            "timestamp": "2026-04-25 06:57:52,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8324
          },
          {
            "timestamp": "2026-04-25 06:57:52,954",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8325
          },
          {
            "timestamp": "2026-04-25 06:57:52,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8326
          },
          {
            "timestamp": "2026-04-25 06:57:52,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8327
          },
          {
            "timestamp": "2026-04-25 06:57:52,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8328
          },
          {
            "timestamp": "2026-04-25 06:57:52,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8329
          },
          {
            "timestamp": "2026-04-25 06:57:52,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8330
          },
          {
            "timestamp": "2026-04-25 06:57:53,016",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8331
          },
          {
            "timestamp": "2026-04-25 06:57:53,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8332
          },
          {
            "timestamp": "2026-04-25 06:57:53,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8333
          },
          {
            "timestamp": "2026-04-25 06:57:53,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8334
          },
          {
            "timestamp": "2026-04-25 06:57:53,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8335
          },
          {
            "timestamp": "2026-04-25 06:57:53,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8336
          },
          {
            "timestamp": "2026-04-25 06:57:53,079",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8337
          },
          {
            "timestamp": "2026-04-25 06:57:53,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8338
          },
          {
            "timestamp": "2026-04-25 06:57:53,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8339
          },
          {
            "timestamp": "2026-04-25 06:57:53,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8340
          },
          {
            "timestamp": "2026-04-25 06:57:53,126",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8341
          },
          {
            "timestamp": "2026-04-25 06:57:53,126",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8342
          },
          {
            "timestamp": "2026-04-25 06:57:53,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8343
          },
          {
            "timestamp": "2026-04-25 06:57:53,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8344
          },
          {
            "timestamp": "2026-04-25 06:57:53,141",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8345
          },
          {
            "timestamp": "2026-04-25 06:57:53,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8346
          },
          {
            "timestamp": "2026-04-25 06:57:53,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8347
          },
          {
            "timestamp": "2026-04-25 06:57:53,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8348
          },
          {
            "timestamp": "2026-04-25 06:57:53,204",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8349
          },
          {
            "timestamp": "2026-04-25 06:57:53,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8350
          },
          {
            "timestamp": "2026-04-25 06:57:53,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8351
          },
          {
            "timestamp": "2026-04-25 06:57:53,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8352
          },
          {
            "timestamp": "2026-04-25 06:57:53,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8353
          },
          {
            "timestamp": "2026-04-25 06:57:53,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8354
          },
          {
            "timestamp": "2026-04-25 06:57:53,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8355
          },
          {
            "timestamp": "2026-04-25 06:57:53,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8356
          },
          {
            "timestamp": "2026-04-25 06:57:53,266",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8357
          },
          {
            "timestamp": "2026-04-25 06:57:53,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8358
          },
          {
            "timestamp": "2026-04-25 06:57:53,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8359
          },
          {
            "timestamp": "2026-04-25 06:57:53,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8360
          },
          {
            "timestamp": "2026-04-25 06:57:53,329",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8361
          },
          {
            "timestamp": "2026-04-25 06:57:53,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8362
          },
          {
            "timestamp": "2026-04-25 06:57:53,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8363
          },
          {
            "timestamp": "2026-04-25 06:57:53,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8364
          },
          {
            "timestamp": "2026-04-25 06:57:53,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8365
          },
          {
            "timestamp": "2026-04-25 06:57:53,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8366
          },
          {
            "timestamp": "2026-04-25 06:57:53,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8367
          },
          {
            "timestamp": "2026-04-25 06:57:53,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8368
          },
          {
            "timestamp": "2026-04-25 06:57:53,391",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8369
          },
          {
            "timestamp": "2026-04-25 06:57:53,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8370
          },
          {
            "timestamp": "2026-04-25 06:57:53,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8371
          },
          {
            "timestamp": "2026-04-25 06:57:53,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8372
          },
          {
            "timestamp": "2026-04-25 06:57:53,454",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8373
          },
          {
            "timestamp": "2026-04-25 06:57:53,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8374
          },
          {
            "timestamp": "2026-04-25 06:57:53,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8375
          },
          {
            "timestamp": "2026-04-25 06:57:53,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8376
          },
          {
            "timestamp": "2026-04-25 06:57:53,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8377
          },
          {
            "timestamp": "2026-04-25 06:57:53,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8378
          },
          {
            "timestamp": "2026-04-25 06:57:53,516",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8379
          },
          {
            "timestamp": "2026-04-25 06:57:53,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8380
          },
          {
            "timestamp": "2026-04-25 06:57:53,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8381
          },
          {
            "timestamp": "2026-04-25 06:57:53,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8382
          },
          {
            "timestamp": "2026-04-25 06:57:53,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8383
          },
          {
            "timestamp": "2026-04-25 06:57:53,579",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8384
          },
          {
            "timestamp": "2026-04-25 06:57:53,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8385
          },
          {
            "timestamp": "2026-04-25 06:57:53,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8386
          },
          {
            "timestamp": "2026-04-25 06:57:53,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8387
          },
          {
            "timestamp": "2026-04-25 06:57:53,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8388
          },
          {
            "timestamp": "2026-04-25 06:57:53,641",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8389
          },
          {
            "timestamp": "2026-04-25 06:57:53,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8390
          },
          {
            "timestamp": "2026-04-25 06:57:53,641",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8391
          },
          {
            "timestamp": "2026-04-25 06:57:53,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8392
          },
          {
            "timestamp": "2026-04-25 06:57:53,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8393
          },
          {
            "timestamp": "2026-04-25 06:57:53,641",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8394
          },
          {
            "timestamp": "2026-04-25 06:57:53,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8395
          },
          {
            "timestamp": "2026-04-25 06:57:53,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8396
          },
          {
            "timestamp": "2026-04-25 06:57:53,704",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8397
          },
          {
            "timestamp": "2026-04-25 06:57:53,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8398
          },
          {
            "timestamp": "2026-04-25 06:57:53,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8399
          },
          {
            "timestamp": "2026-04-25 06:57:53,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8400
          },
          {
            "timestamp": "2026-04-25 06:57:53,766",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8401
          },
          {
            "timestamp": "2026-04-25 06:57:53,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8402
          },
          {
            "timestamp": "2026-04-25 06:57:53,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8403
          },
          {
            "timestamp": "2026-04-25 06:57:53,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8404
          },
          {
            "timestamp": "2026-04-25 06:57:53,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8405
          },
          {
            "timestamp": "2026-04-25 06:57:53,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8406
          },
          {
            "timestamp": "2026-04-25 06:57:53,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8407
          },
          {
            "timestamp": "2026-04-25 06:57:53,829",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8408
          },
          {
            "timestamp": "2026-04-25 06:57:53,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8409
          },
          {
            "timestamp": "2026-04-25 06:57:53,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8410
          },
          {
            "timestamp": "2026-04-25 06:57:53,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8411
          },
          {
            "timestamp": "2026-04-25 06:57:53,891",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8412
          },
          {
            "timestamp": "2026-04-25 06:57:53,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8413
          },
          {
            "timestamp": "2026-04-25 06:57:53,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8414
          },
          {
            "timestamp": "2026-04-25 06:57:53,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8415
          },
          {
            "timestamp": "2026-04-25 06:57:53,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8416
          },
          {
            "timestamp": "2026-04-25 06:57:53,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8417
          },
          {
            "timestamp": "2026-04-25 06:57:53,954",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8418
          },
          {
            "timestamp": "2026-04-25 06:57:53,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8419
          },
          {
            "timestamp": "2026-04-25 06:57:53,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8420
          },
          {
            "timestamp": "2026-04-25 06:57:53,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8421
          },
          {
            "timestamp": "2026-04-25 06:57:53,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8422
          },
          {
            "timestamp": "2026-04-25 06:57:54,016",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8423
          },
          {
            "timestamp": "2026-04-25 06:57:54,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8424
          },
          {
            "timestamp": "2026-04-25 06:57:54,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8425
          },
          {
            "timestamp": "2026-04-25 06:57:54,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8426
          },
          {
            "timestamp": "2026-04-25 06:57:54,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8427
          },
          {
            "timestamp": "2026-04-25 06:57:54,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8428
          },
          {
            "timestamp": "2026-04-25 06:57:54,079",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8429
          },
          {
            "timestamp": "2026-04-25 06:57:54,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8430
          },
          {
            "timestamp": "2026-04-25 06:57:54,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8431
          },
          {
            "timestamp": "2026-04-25 06:57:54,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8432
          },
          {
            "timestamp": "2026-04-25 06:57:54,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8433
          },
          {
            "timestamp": "2026-04-25 06:57:54,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8434
          },
          {
            "timestamp": "2026-04-25 06:57:54,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8435
          },
          {
            "timestamp": "2026-04-25 06:57:54,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8436
          },
          {
            "timestamp": "2026-04-25 06:57:54,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8437
          },
          {
            "timestamp": "2026-04-25 06:57:54,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8438
          },
          {
            "timestamp": "2026-04-25 06:57:54,157",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8439
          },
          {
            "timestamp": "2026-04-25 06:57:54,157",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8440
          },
          {
            "timestamp": "2026-04-25 06:57:54,204",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8441
          },
          {
            "timestamp": "2026-04-25 06:57:54,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8442
          },
          {
            "timestamp": "2026-04-25 06:57:54,204",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8443
          },
          {
            "timestamp": "2026-04-25 06:57:54,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8444
          },
          {
            "timestamp": "2026-04-25 06:57:54,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8445
          },
          {
            "timestamp": "2026-04-25 06:57:54,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8446
          },
          {
            "timestamp": "2026-04-25 06:57:54,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8447
          },
          {
            "timestamp": "2026-04-25 06:57:54,266",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8448
          },
          {
            "timestamp": "2026-04-25 06:57:54,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8449
          },
          {
            "timestamp": "2026-04-25 06:57:54,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8450
          },
          {
            "timestamp": "2026-04-25 06:57:54,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8451
          },
          {
            "timestamp": "2026-04-25 06:57:54,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8452
          },
          {
            "timestamp": "2026-04-25 06:57:54,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8453
          },
          {
            "timestamp": "2026-04-25 06:57:54,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8454
          },
          {
            "timestamp": "2026-04-25 06:57:54,329",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8455
          },
          {
            "timestamp": "2026-04-25 06:57:54,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8456
          },
          {
            "timestamp": "2026-04-25 06:57:54,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8457
          },
          {
            "timestamp": "2026-04-25 06:57:54,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8458
          },
          {
            "timestamp": "2026-04-25 06:57:54,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8459
          },
          {
            "timestamp": "2026-04-25 06:57:54,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8460
          },
          {
            "timestamp": "2026-04-25 06:57:54,391",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8461
          },
          {
            "timestamp": "2026-04-25 06:57:54,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8462
          },
          {
            "timestamp": "2026-04-25 06:57:54,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8463
          },
          {
            "timestamp": "2026-04-25 06:57:54,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8464
          },
          {
            "timestamp": "2026-04-25 06:57:54,454",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8465
          },
          {
            "timestamp": "2026-04-25 06:57:54,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8466
          },
          {
            "timestamp": "2026-04-25 06:57:54,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8467
          },
          {
            "timestamp": "2026-04-25 06:57:54,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8468
          },
          {
            "timestamp": "2026-04-25 06:57:54,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8469
          },
          {
            "timestamp": "2026-04-25 06:57:54,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8470
          },
          {
            "timestamp": "2026-04-25 06:57:54,516",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8471
          },
          {
            "timestamp": "2026-04-25 06:57:54,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8472
          },
          {
            "timestamp": "2026-04-25 06:57:54,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8473
          },
          {
            "timestamp": "2026-04-25 06:57:54,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8474
          },
          {
            "timestamp": "2026-04-25 06:57:54,579",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8475
          },
          {
            "timestamp": "2026-04-25 06:57:54,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8476
          },
          {
            "timestamp": "2026-04-25 06:57:54,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8477
          },
          {
            "timestamp": "2026-04-25 06:57:54,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8478
          },
          {
            "timestamp": "2026-04-25 06:57:54,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8479
          },
          {
            "timestamp": "2026-04-25 06:57:54,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8480
          },
          {
            "timestamp": "2026-04-25 06:57:54,641",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8481
          },
          {
            "timestamp": "2026-04-25 06:57:54,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8482
          },
          {
            "timestamp": "2026-04-25 06:57:54,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8483
          },
          {
            "timestamp": "2026-04-25 06:57:54,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8484
          },
          {
            "timestamp": "2026-04-25 06:57:54,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8485
          },
          {
            "timestamp": "2026-04-25 06:57:54,672",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8486
          },
          {
            "timestamp": "2026-04-25 06:57:54,672",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8487
          },
          {
            "timestamp": "2026-04-25 06:57:54,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8488
          },
          {
            "timestamp": "2026-04-25 06:57:54,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8489
          },
          {
            "timestamp": "2026-04-25 06:57:54,704",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8490
          },
          {
            "timestamp": "2026-04-25 06:57:54,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8491
          },
          {
            "timestamp": "2026-04-25 06:57:54,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8492
          },
          {
            "timestamp": "2026-04-25 06:57:54,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8493
          },
          {
            "timestamp": "2026-04-25 06:57:54,766",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8494
          },
          {
            "timestamp": "2026-04-25 06:57:54,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8495
          },
          {
            "timestamp": "2026-04-25 06:57:54,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8496
          },
          {
            "timestamp": "2026-04-25 06:57:54,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8497
          },
          {
            "timestamp": "2026-04-25 06:57:54,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8498
          },
          {
            "timestamp": "2026-04-25 06:57:54,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8499
          },
          {
            "timestamp": "2026-04-25 06:57:54,829",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8500
          },
          {
            "timestamp": "2026-04-25 06:57:54,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8501
          },
          {
            "timestamp": "2026-04-25 06:57:54,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8502
          },
          {
            "timestamp": "2026-04-25 06:57:54,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8503
          },
          {
            "timestamp": "2026-04-25 06:57:54,891",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8504
          },
          {
            "timestamp": "2026-04-25 06:57:54,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8505
          },
          {
            "timestamp": "2026-04-25 06:57:54,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8506
          },
          {
            "timestamp": "2026-04-25 06:57:54,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8507
          },
          {
            "timestamp": "2026-04-25 06:57:54,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8508
          },
          {
            "timestamp": "2026-04-25 06:57:54,954",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8509
          },
          {
            "timestamp": "2026-04-25 06:57:54,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8510
          },
          {
            "timestamp": "2026-04-25 06:57:54,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8511
          },
          {
            "timestamp": "2026-04-25 06:57:54,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8512
          },
          {
            "timestamp": "2026-04-25 06:57:54,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8513
          },
          {
            "timestamp": "2026-04-25 06:57:54,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8514
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8515
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000004b0"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x000s\\x00T\\x19\\x00\\x00$\\x1b\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6948"
              }
            ],
            "repeated": 0,
            "id": 8516
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "misc",
            "api": "GlobalMemoryStatusEx",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "MemoryLoad",
                "value": "25"
              },
              {
                "name": "TotalPhysicalMB",
                "value": "8191"
              }
            ],
            "repeated": 0,
            "id": 8517
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000033c"
              },
              {
                "name": "Milliseconds",
                "value": "18446744073709551615"
              },
              {
                "name": "Status",
                "value": "Infinite"
              }
            ],
            "repeated": 0,
            "id": 8518
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06518000"
              },
              {
                "name": "RegionSize",
                "value": "0x00041000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 8519
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06590000"
              },
              {
                "name": "RegionSize",
                "value": "0x00071000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 8520
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06622000"
              },
              {
                "name": "RegionSize",
                "value": "0x0024b000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 8521
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "misc",
            "api": "GlobalMemoryStatusEx",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "MemoryLoad",
                "value": "25"
              },
              {
                "name": "TotalPhysicalMB",
                "value": "8191"
              }
            ],
            "repeated": 0,
            "id": 8522
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x737855cd",
            "parentcaller": "0x738e1718",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8523
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005c4"
              }
            ],
            "repeated": 0,
            "id": 8524
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000658"
              }
            ],
            "repeated": 0,
            "id": 8525
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006c0"
              }
            ],
            "repeated": 0,
            "id": 8526
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000060c"
              }
            ],
            "repeated": 0,
            "id": 8527
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000588"
              }
            ],
            "repeated": 0,
            "id": 8528
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005d8"
              }
            ],
            "repeated": 0,
            "id": 8529
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000654"
              }
            ],
            "repeated": 0,
            "id": 8530
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000064c"
              }
            ],
            "repeated": 0,
            "id": 8531
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000604"
              }
            ],
            "repeated": 0,
            "id": 8532
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000610"
              }
            ],
            "repeated": 0,
            "id": 8533
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005c0"
              }
            ],
            "repeated": 0,
            "id": 8534
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000634"
              }
            ],
            "repeated": 0,
            "id": 8535
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005f8"
              }
            ],
            "repeated": 0,
            "id": 8536
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 8537
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000618"
              }
            ],
            "repeated": 0,
            "id": 8538
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8539
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006b0"
              }
            ],
            "repeated": 0,
            "id": 8540
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x0507593a",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8541
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000054c"
              }
            ],
            "repeated": 0,
            "id": 8542
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000544"
              }
            ],
            "repeated": 0,
            "id": 8543
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000510"
              }
            ],
            "repeated": 0,
            "id": 8544
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x050759c3",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8545
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000052c"
              }
            ],
            "repeated": 0,
            "id": 8546
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000364"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xa0r\\x00T\\x19\\x00\\x00\\\t\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x02\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "2396"
              }
            ],
            "repeated": 0,
            "id": 8547
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000006c4",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1732"
              }
            ],
            "repeated": 0,
            "id": 8548
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000524"
              }
            ],
            "repeated": 0,
            "id": 8549
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1732"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 8550
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000518"
              }
            ],
            "repeated": 0,
            "id": 8551
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000508"
              }
            ],
            "repeated": 0,
            "id": 8552
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1732"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 8553
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000520"
              }
            ],
            "repeated": 0,
            "id": 8554
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000051c"
              }
            ],
            "repeated": 0,
            "id": 8555
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8556
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000348"
              },
              {
                "name": "Milliseconds",
                "value": "2000"
              }
            ],
            "repeated": 0,
            "id": 8557
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x7726269a",
            "parentcaller": "0x738daf07",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005ec"
              }
            ],
            "repeated": 0,
            "id": 8558
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x7726269a",
            "parentcaller": "0x738daf07",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000062c"
              }
            ],
            "repeated": 0,
            "id": 8559
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8560
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000348"
              },
              {
                "name": "Milliseconds",
                "value": "2000"
              }
            ],
            "repeated": 0,
            "id": 8561
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 8562
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8563
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8564
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000006c4"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 8565
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1732"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 8566
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8567
          },
          {
            "timestamp": "2026-04-25 06:57:55,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8568
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8569
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8570
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8571
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8572
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8573
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8574
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1732"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 8575
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 8576
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 8577
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 8578
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 8579
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 8580
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1732"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 8581
          },
          {
            "timestamp": "2026-04-25 06:57:55,016",
            "thread_id": "5852",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1732"
              }
            ],
            "repeated": 0,
            "id": 8582
          },
          {
            "timestamp": "2026-04-25 06:57:55,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8583
          },
          {
            "timestamp": "2026-04-25 06:57:55,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8584
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 8585
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "5852",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1732"
              }
            ],
            "repeated": 0,
            "id": 8586
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "5852",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 8587
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "5852",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 8588
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8589
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8590
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 8591
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8592
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8593
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8594
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8595
          },
          {
            "timestamp": "2026-04-25 06:57:55,047",
            "thread_id": "5852",
            "caller": "0x050759c3",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 8596
          },
          {
            "timestamp": "2026-04-25 06:57:55,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8597
          },
          {
            "timestamp": "2026-04-25 06:57:55,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8598
          },
          {
            "timestamp": "2026-04-25 06:57:55,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8599
          },
          {
            "timestamp": "2026-04-25 06:57:55,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8600
          },
          {
            "timestamp": "2026-04-25 06:57:55,141",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8601
          },
          {
            "timestamp": "2026-04-25 06:57:55,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8602
          },
          {
            "timestamp": "2026-04-25 06:57:55,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8603
          },
          {
            "timestamp": "2026-04-25 06:57:55,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8604
          },
          {
            "timestamp": "2026-04-25 06:57:55,188",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8605
          },
          {
            "timestamp": "2026-04-25 06:57:55,188",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8606
          },
          {
            "timestamp": "2026-04-25 06:57:55,204",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8607
          },
          {
            "timestamp": "2026-04-25 06:57:55,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8608
          },
          {
            "timestamp": "2026-04-25 06:57:55,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8609
          },
          {
            "timestamp": "2026-04-25 06:57:55,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8610
          },
          {
            "timestamp": "2026-04-25 06:57:55,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8611
          },
          {
            "timestamp": "2026-04-25 06:57:55,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8612
          },
          {
            "timestamp": "2026-04-25 06:57:55,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8613
          },
          {
            "timestamp": "2026-04-25 06:57:55,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8614
          },
          {
            "timestamp": "2026-04-25 06:57:55,266",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8615
          },
          {
            "timestamp": "2026-04-25 06:57:55,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8616
          },
          {
            "timestamp": "2026-04-25 06:57:55,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8617
          },
          {
            "timestamp": "2026-04-25 06:57:55,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8618
          },
          {
            "timestamp": "2026-04-25 06:57:55,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8619
          },
          {
            "timestamp": "2026-04-25 06:57:55,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8620
          },
          {
            "timestamp": "2026-04-25 06:57:55,329",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8621
          },
          {
            "timestamp": "2026-04-25 06:57:55,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8622
          },
          {
            "timestamp": "2026-04-25 06:57:55,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8623
          },
          {
            "timestamp": "2026-04-25 06:57:55,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8624
          },
          {
            "timestamp": "2026-04-25 06:57:55,391",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8625
          },
          {
            "timestamp": "2026-04-25 06:57:55,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8626
          },
          {
            "timestamp": "2026-04-25 06:57:55,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8627
          },
          {
            "timestamp": "2026-04-25 06:57:55,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8628
          },
          {
            "timestamp": "2026-04-25 06:57:55,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8629
          },
          {
            "timestamp": "2026-04-25 06:57:55,454",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076bc7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 8630
          },
          {
            "timestamp": "2026-04-25 06:57:55,454",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8631
          },
          {
            "timestamp": "2026-04-25 06:57:55,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8632
          },
          {
            "timestamp": "2026-04-25 06:57:55,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8633
          },
          {
            "timestamp": "2026-04-25 06:57:55,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8634
          },
          {
            "timestamp": "2026-04-25 06:57:55,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8635
          },
          {
            "timestamp": "2026-04-25 06:57:55,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8636
          },
          {
            "timestamp": "2026-04-25 06:57:55,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8637
          },
          {
            "timestamp": "2026-04-25 06:57:55,516",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8638
          },
          {
            "timestamp": "2026-04-25 06:57:55,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8639
          },
          {
            "timestamp": "2026-04-25 06:57:55,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8640
          },
          {
            "timestamp": "2026-04-25 06:57:55,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8641
          },
          {
            "timestamp": "2026-04-25 06:57:55,579",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8642
          },
          {
            "timestamp": "2026-04-25 06:57:55,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8643
          },
          {
            "timestamp": "2026-04-25 06:57:55,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8644
          },
          {
            "timestamp": "2026-04-25 06:57:55,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8645
          },
          {
            "timestamp": "2026-04-25 06:57:55,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8646
          },
          {
            "timestamp": "2026-04-25 06:57:55,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8647
          },
          {
            "timestamp": "2026-04-25 06:57:55,641",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8648
          },
          {
            "timestamp": "2026-04-25 06:57:55,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8649
          },
          {
            "timestamp": "2026-04-25 06:57:55,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8650
          },
          {
            "timestamp": "2026-04-25 06:57:55,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8651
          },
          {
            "timestamp": "2026-04-25 06:57:55,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8652
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8653
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8654
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8655
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8656
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8657
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8658
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8659
          },
          {
            "timestamp": "2026-04-25 06:57:55,704",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8660
          },
          {
            "timestamp": "2026-04-25 06:57:55,766",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8661
          },
          {
            "timestamp": "2026-04-25 06:57:55,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8662
          },
          {
            "timestamp": "2026-04-25 06:57:55,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8663
          },
          {
            "timestamp": "2026-04-25 06:57:55,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8664
          },
          {
            "timestamp": "2026-04-25 06:57:55,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8665
          },
          {
            "timestamp": "2026-04-25 06:57:55,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8666
          },
          {
            "timestamp": "2026-04-25 06:57:55,829",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8667
          },
          {
            "timestamp": "2026-04-25 06:57:55,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8668
          },
          {
            "timestamp": "2026-04-25 06:57:55,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8669
          },
          {
            "timestamp": "2026-04-25 06:57:55,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8670
          },
          {
            "timestamp": "2026-04-25 06:57:55,891",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8671
          },
          {
            "timestamp": "2026-04-25 06:57:55,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8672
          },
          {
            "timestamp": "2026-04-25 06:57:55,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8673
          },
          {
            "timestamp": "2026-04-25 06:57:55,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8674
          },
          {
            "timestamp": "2026-04-25 06:57:55,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8675
          },
          {
            "timestamp": "2026-04-25 06:57:55,954",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8676
          },
          {
            "timestamp": "2026-04-25 06:57:55,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8677
          },
          {
            "timestamp": "2026-04-25 06:57:55,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8678
          },
          {
            "timestamp": "2026-04-25 06:57:55,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8679
          },
          {
            "timestamp": "2026-04-25 06:57:55,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8680
          },
          {
            "timestamp": "2026-04-25 06:57:56,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8681
          },
          {
            "timestamp": "2026-04-25 06:57:56,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8682
          },
          {
            "timestamp": "2026-04-25 06:57:56,016",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8683
          },
          {
            "timestamp": "2026-04-25 06:57:56,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8684
          },
          {
            "timestamp": "2026-04-25 06:57:56,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8685
          },
          {
            "timestamp": "2026-04-25 06:57:56,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8686
          },
          {
            "timestamp": "2026-04-25 06:57:56,079",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8687
          },
          {
            "timestamp": "2026-04-25 06:57:56,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8688
          },
          {
            "timestamp": "2026-04-25 06:57:56,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8689
          },
          {
            "timestamp": "2026-04-25 06:57:56,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8690
          },
          {
            "timestamp": "2026-04-25 06:57:56,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8691
          },
          {
            "timestamp": "2026-04-25 06:57:56,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8692
          },
          {
            "timestamp": "2026-04-25 06:57:56,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8693
          },
          {
            "timestamp": "2026-04-25 06:57:56,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8694
          },
          {
            "timestamp": "2026-04-25 06:57:56,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8695
          },
          {
            "timestamp": "2026-04-25 06:57:56,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8696
          },
          {
            "timestamp": "2026-04-25 06:57:56,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8697
          },
          {
            "timestamp": "2026-04-25 06:57:56,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8698
          },
          {
            "timestamp": "2026-04-25 06:57:56,204",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8699
          },
          {
            "timestamp": "2026-04-25 06:57:56,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8700
          },
          {
            "timestamp": "2026-04-25 06:57:56,204",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8701
          },
          {
            "timestamp": "2026-04-25 06:57:56,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8702
          },
          {
            "timestamp": "2026-04-25 06:57:56,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8703
          },
          {
            "timestamp": "2026-04-25 06:57:56,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8704
          },
          {
            "timestamp": "2026-04-25 06:57:56,219",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8705
          },
          {
            "timestamp": "2026-04-25 06:57:56,219",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8706
          },
          {
            "timestamp": "2026-04-25 06:57:56,266",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8707
          },
          {
            "timestamp": "2026-04-25 06:57:56,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8708
          },
          {
            "timestamp": "2026-04-25 06:57:56,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8709
          },
          {
            "timestamp": "2026-04-25 06:57:56,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8710
          },
          {
            "timestamp": "2026-04-25 06:57:56,329",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8711
          },
          {
            "timestamp": "2026-04-25 06:57:56,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8712
          },
          {
            "timestamp": "2026-04-25 06:57:56,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8713
          },
          {
            "timestamp": "2026-04-25 06:57:56,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8714
          },
          {
            "timestamp": "2026-04-25 06:57:56,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8715
          },
          {
            "timestamp": "2026-04-25 06:57:56,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8716
          },
          {
            "timestamp": "2026-04-25 06:57:56,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8717
          },
          {
            "timestamp": "2026-04-25 06:57:56,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8718
          },
          {
            "timestamp": "2026-04-25 06:57:56,391",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8719
          },
          {
            "timestamp": "2026-04-25 06:57:56,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8720
          },
          {
            "timestamp": "2026-04-25 06:57:56,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8721
          },
          {
            "timestamp": "2026-04-25 06:57:56,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8722
          },
          {
            "timestamp": "2026-04-25 06:57:56,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8723
          },
          {
            "timestamp": "2026-04-25 06:57:56,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8724
          },
          {
            "timestamp": "2026-04-25 06:57:56,454",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8725
          },
          {
            "timestamp": "2026-04-25 06:57:56,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8726
          },
          {
            "timestamp": "2026-04-25 06:57:56,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8727
          },
          {
            "timestamp": "2026-04-25 06:57:56,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8728
          },
          {
            "timestamp": "2026-04-25 06:57:56,516",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8729
          },
          {
            "timestamp": "2026-04-25 06:57:56,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8730
          },
          {
            "timestamp": "2026-04-25 06:57:56,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8731
          },
          {
            "timestamp": "2026-04-25 06:57:56,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8732
          },
          {
            "timestamp": "2026-04-25 06:57:56,579",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8733
          },
          {
            "timestamp": "2026-04-25 06:57:56,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8734
          },
          {
            "timestamp": "2026-04-25 06:57:56,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8735
          },
          {
            "timestamp": "2026-04-25 06:57:56,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8736
          },
          {
            "timestamp": "2026-04-25 06:57:56,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8737
          },
          {
            "timestamp": "2026-04-25 06:57:56,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8738
          },
          {
            "timestamp": "2026-04-25 06:57:56,641",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8739
          },
          {
            "timestamp": "2026-04-25 06:57:56,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8740
          },
          {
            "timestamp": "2026-04-25 06:57:56,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8741
          },
          {
            "timestamp": "2026-04-25 06:57:56,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8742
          },
          {
            "timestamp": "2026-04-25 06:57:56,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8743
          },
          {
            "timestamp": "2026-04-25 06:57:56,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8744
          },
          {
            "timestamp": "2026-04-25 06:57:56,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8745
          },
          {
            "timestamp": "2026-04-25 06:57:56,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8746
          },
          {
            "timestamp": "2026-04-25 06:57:56,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8747
          },
          {
            "timestamp": "2026-04-25 06:57:56,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8748
          },
          {
            "timestamp": "2026-04-25 06:57:56,735",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8749
          },
          {
            "timestamp": "2026-04-25 06:57:56,735",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8750
          },
          {
            "timestamp": "2026-04-25 06:57:56,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8751
          },
          {
            "timestamp": "2026-04-25 06:57:56,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8752
          },
          {
            "timestamp": "2026-04-25 06:57:56,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8753
          },
          {
            "timestamp": "2026-04-25 06:57:56,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8754
          },
          {
            "timestamp": "2026-04-25 06:57:56,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8755
          },
          {
            "timestamp": "2026-04-25 06:57:56,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8756
          },
          {
            "timestamp": "2026-04-25 06:57:56,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8757
          },
          {
            "timestamp": "2026-04-25 06:57:56,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8758
          },
          {
            "timestamp": "2026-04-25 06:57:56,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8759
          },
          {
            "timestamp": "2026-04-25 06:57:56,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8760
          },
          {
            "timestamp": "2026-04-25 06:57:56,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8761
          },
          {
            "timestamp": "2026-04-25 06:57:56,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8762
          },
          {
            "timestamp": "2026-04-25 06:57:56,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8763
          },
          {
            "timestamp": "2026-04-25 06:57:56,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8764
          },
          {
            "timestamp": "2026-04-25 06:57:56,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8765
          },
          {
            "timestamp": "2026-04-25 06:57:56,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8766
          },
          {
            "timestamp": "2026-04-25 06:57:56,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8767
          },
          {
            "timestamp": "2026-04-25 06:57:56,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8768
          },
          {
            "timestamp": "2026-04-25 06:57:56,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8769
          },
          {
            "timestamp": "2026-04-25 06:57:56,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8770
          },
          {
            "timestamp": "2026-04-25 06:57:56,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8771
          },
          {
            "timestamp": "2026-04-25 06:57:56,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8772
          },
          {
            "timestamp": "2026-04-25 06:57:57,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8773
          },
          {
            "timestamp": "2026-04-25 06:57:57,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8774
          },
          {
            "timestamp": "2026-04-25 06:57:57,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8775
          },
          {
            "timestamp": "2026-04-25 06:57:57,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8776
          },
          {
            "timestamp": "2026-04-25 06:57:57,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8777
          },
          {
            "timestamp": "2026-04-25 06:57:57,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8778
          },
          {
            "timestamp": "2026-04-25 06:57:57,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8779
          },
          {
            "timestamp": "2026-04-25 06:57:57,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8780
          },
          {
            "timestamp": "2026-04-25 06:57:57,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8781
          },
          {
            "timestamp": "2026-04-25 06:57:57,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8782
          },
          {
            "timestamp": "2026-04-25 06:57:57,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8783
          },
          {
            "timestamp": "2026-04-25 06:57:57,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 8784
          },
          {
            "timestamp": "2026-04-25 06:57:57,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8785
          },
          {
            "timestamp": "2026-04-25 06:57:57,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8786
          },
          {
            "timestamp": "2026-04-25 06:57:57,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8787
          },
          {
            "timestamp": "2026-04-25 06:57:57,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8788
          },
          {
            "timestamp": "2026-04-25 06:57:57,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8789
          },
          {
            "timestamp": "2026-04-25 06:57:57,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8790
          },
          {
            "timestamp": "2026-04-25 06:57:57,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8791
          },
          {
            "timestamp": "2026-04-25 06:57:57,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8792
          },
          {
            "timestamp": "2026-04-25 06:57:57,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8793
          },
          {
            "timestamp": "2026-04-25 06:57:57,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8794
          },
          {
            "timestamp": "2026-04-25 06:57:57,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8795
          },
          {
            "timestamp": "2026-04-25 06:57:57,251",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8796
          },
          {
            "timestamp": "2026-04-25 06:57:57,251",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8797
          },
          {
            "timestamp": "2026-04-25 06:57:57,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8798
          },
          {
            "timestamp": "2026-04-25 06:57:57,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8799
          },
          {
            "timestamp": "2026-04-25 06:57:57,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8800
          },
          {
            "timestamp": "2026-04-25 06:57:57,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8801
          },
          {
            "timestamp": "2026-04-25 06:57:57,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8802
          },
          {
            "timestamp": "2026-04-25 06:57:57,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8803
          },
          {
            "timestamp": "2026-04-25 06:57:57,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8804
          },
          {
            "timestamp": "2026-04-25 06:57:57,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8805
          },
          {
            "timestamp": "2026-04-25 06:57:57,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8806
          },
          {
            "timestamp": "2026-04-25 06:57:57,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8807
          },
          {
            "timestamp": "2026-04-25 06:57:57,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8808
          },
          {
            "timestamp": "2026-04-25 06:57:57,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8809
          },
          {
            "timestamp": "2026-04-25 06:57:57,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8810
          },
          {
            "timestamp": "2026-04-25 06:57:57,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8811
          },
          {
            "timestamp": "2026-04-25 06:57:57,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8812
          },
          {
            "timestamp": "2026-04-25 06:57:57,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8813
          },
          {
            "timestamp": "2026-04-25 06:57:57,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8814
          },
          {
            "timestamp": "2026-04-25 06:57:57,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8815
          },
          {
            "timestamp": "2026-04-25 06:57:57,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8816
          },
          {
            "timestamp": "2026-04-25 06:57:57,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8817
          },
          {
            "timestamp": "2026-04-25 06:57:57,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8818
          },
          {
            "timestamp": "2026-04-25 06:57:57,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8819
          },
          {
            "timestamp": "2026-04-25 06:57:57,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8820
          },
          {
            "timestamp": "2026-04-25 06:57:57,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8821
          },
          {
            "timestamp": "2026-04-25 06:57:57,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8822
          },
          {
            "timestamp": "2026-04-25 06:57:57,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8823
          },
          {
            "timestamp": "2026-04-25 06:57:57,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8824
          },
          {
            "timestamp": "2026-04-25 06:57:57,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8825
          },
          {
            "timestamp": "2026-04-25 06:57:57,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8826
          },
          {
            "timestamp": "2026-04-25 06:57:57,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8827
          },
          {
            "timestamp": "2026-04-25 06:57:57,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8828
          },
          {
            "timestamp": "2026-04-25 06:57:57,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8829
          },
          {
            "timestamp": "2026-04-25 06:57:57,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8830
          },
          {
            "timestamp": "2026-04-25 06:57:57,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8831
          },
          {
            "timestamp": "2026-04-25 06:57:57,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8832
          },
          {
            "timestamp": "2026-04-25 06:57:57,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8833
          },
          {
            "timestamp": "2026-04-25 06:57:57,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8834
          },
          {
            "timestamp": "2026-04-25 06:57:57,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8835
          },
          {
            "timestamp": "2026-04-25 06:57:57,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8836
          },
          {
            "timestamp": "2026-04-25 06:57:57,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8837
          },
          {
            "timestamp": "2026-04-25 06:57:57,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8838
          },
          {
            "timestamp": "2026-04-25 06:57:57,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8839
          },
          {
            "timestamp": "2026-04-25 06:57:57,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8840
          },
          {
            "timestamp": "2026-04-25 06:57:57,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8841
          },
          {
            "timestamp": "2026-04-25 06:57:57,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8842
          },
          {
            "timestamp": "2026-04-25 06:57:57,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8843
          },
          {
            "timestamp": "2026-04-25 06:57:57,782",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8844
          },
          {
            "timestamp": "2026-04-25 06:57:57,782",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8845
          },
          {
            "timestamp": "2026-04-25 06:57:57,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8846
          },
          {
            "timestamp": "2026-04-25 06:57:57,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8847
          },
          {
            "timestamp": "2026-04-25 06:57:57,797",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8848
          },
          {
            "timestamp": "2026-04-25 06:57:57,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8849
          },
          {
            "timestamp": "2026-04-25 06:57:57,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8850
          },
          {
            "timestamp": "2026-04-25 06:57:57,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8851
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x7385b070",
            "parentcaller": "0x7385b08b",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "16"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "3116"
              }
            ],
            "repeated": 0,
            "id": 8852
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x7726074f",
            "parentcaller": "0x77bfbb70",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "oleaut32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76060000"
              }
            ],
            "repeated": 0,
            "id": 8853
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x77eab5a6",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "3116"
              }
            ],
            "repeated": 0,
            "id": 8854
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x747cad94",
            "parentcaller": "0x747ca15c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005b0"
              }
            ],
            "repeated": 0,
            "id": 8855
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 8856
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x774e45ae",
            "parentcaller": "0x774e442c",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 8857
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x7726269a",
            "parentcaller": "0x76645041",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005ac"
              }
            ],
            "repeated": 0,
            "id": 8858
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005b8"
              }
            ],
            "repeated": 0,
            "id": 8859
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005b4"
              }
            ],
            "repeated": 0,
            "id": 8860
          },
          {
            "timestamp": "2026-04-25 06:57:57,844",
            "thread_id": "3116",
            "caller": "0x77eab5c9",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 8861
          },
          {
            "timestamp": "2026-04-25 06:57:57,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8862
          },
          {
            "timestamp": "2026-04-25 06:57:57,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8863
          },
          {
            "timestamp": "2026-04-25 06:57:57,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8864
          },
          {
            "timestamp": "2026-04-25 06:57:57,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8865
          },
          {
            "timestamp": "2026-04-25 06:57:57,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8866
          },
          {
            "timestamp": "2026-04-25 06:57:57,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8867
          },
          {
            "timestamp": "2026-04-25 06:57:57,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8868
          },
          {
            "timestamp": "2026-04-25 06:57:57,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8869
          },
          {
            "timestamp": "2026-04-25 06:57:57,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8870
          },
          {
            "timestamp": "2026-04-25 06:57:58,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8871
          },
          {
            "timestamp": "2026-04-25 06:57:58,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8872
          },
          {
            "timestamp": "2026-04-25 06:57:58,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8873
          },
          {
            "timestamp": "2026-04-25 06:57:58,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8874
          },
          {
            "timestamp": "2026-04-25 06:57:58,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8875
          },
          {
            "timestamp": "2026-04-25 06:57:58,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8876
          },
          {
            "timestamp": "2026-04-25 06:57:58,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8877
          },
          {
            "timestamp": "2026-04-25 06:57:58,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8878
          },
          {
            "timestamp": "2026-04-25 06:57:58,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8879
          },
          {
            "timestamp": "2026-04-25 06:57:58,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8880
          },
          {
            "timestamp": "2026-04-25 06:57:58,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8881
          },
          {
            "timestamp": "2026-04-25 06:57:58,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8882
          },
          {
            "timestamp": "2026-04-25 06:57:58,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8883
          },
          {
            "timestamp": "2026-04-25 06:57:58,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8884
          },
          {
            "timestamp": "2026-04-25 06:57:58,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8885
          },
          {
            "timestamp": "2026-04-25 06:57:58,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8886
          },
          {
            "timestamp": "2026-04-25 06:57:58,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "31"
              }
            ],
            "repeated": 0,
            "id": 8887
          },
          {
            "timestamp": "2026-04-25 06:57:58,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8888
          },
          {
            "timestamp": "2026-04-25 06:57:58,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8889
          },
          {
            "timestamp": "2026-04-25 06:57:58,235",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8890
          },
          {
            "timestamp": "2026-04-25 06:57:58,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 8891
          },
          {
            "timestamp": "2026-04-25 06:57:58,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8892
          },
          {
            "timestamp": "2026-04-25 06:57:58,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8893
          },
          {
            "timestamp": "2026-04-25 06:57:58,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8894
          },
          {
            "timestamp": "2026-04-25 06:57:58,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8895
          },
          {
            "timestamp": "2026-04-25 06:57:58,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8896
          },
          {
            "timestamp": "2026-04-25 06:57:58,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8897
          },
          {
            "timestamp": "2026-04-25 06:57:58,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8898
          },
          {
            "timestamp": "2026-04-25 06:57:58,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8899
          },
          {
            "timestamp": "2026-04-25 06:57:58,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8900
          },
          {
            "timestamp": "2026-04-25 06:57:58,297",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8901
          },
          {
            "timestamp": "2026-04-25 06:57:58,297",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8902
          },
          {
            "timestamp": "2026-04-25 06:57:58,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8903
          },
          {
            "timestamp": "2026-04-25 06:57:58,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8904
          },
          {
            "timestamp": "2026-04-25 06:57:58,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8905
          },
          {
            "timestamp": "2026-04-25 06:57:58,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8906
          },
          {
            "timestamp": "2026-04-25 06:57:58,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8907
          },
          {
            "timestamp": "2026-04-25 06:57:58,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8908
          },
          {
            "timestamp": "2026-04-25 06:57:58,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8909
          },
          {
            "timestamp": "2026-04-25 06:57:58,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8910
          },
          {
            "timestamp": "2026-04-25 06:57:58,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8911
          },
          {
            "timestamp": "2026-04-25 06:57:58,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8912
          },
          {
            "timestamp": "2026-04-25 06:57:58,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8913
          },
          {
            "timestamp": "2026-04-25 06:57:58,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8914
          },
          {
            "timestamp": "2026-04-25 06:57:58,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8915
          },
          {
            "timestamp": "2026-04-25 06:57:58,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8916
          },
          {
            "timestamp": "2026-04-25 06:57:58,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8917
          },
          {
            "timestamp": "2026-04-25 06:57:58,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8918
          },
          {
            "timestamp": "2026-04-25 06:57:58,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8919
          },
          {
            "timestamp": "2026-04-25 06:57:58,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8920
          },
          {
            "timestamp": "2026-04-25 06:57:58,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8921
          },
          {
            "timestamp": "2026-04-25 06:57:58,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8922
          },
          {
            "timestamp": "2026-04-25 06:57:58,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8923
          },
          {
            "timestamp": "2026-04-25 06:57:58,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8924
          },
          {
            "timestamp": "2026-04-25 06:57:58,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8925
          },
          {
            "timestamp": "2026-04-25 06:57:58,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8926
          },
          {
            "timestamp": "2026-04-25 06:57:58,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8927
          },
          {
            "timestamp": "2026-04-25 06:57:58,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8928
          },
          {
            "timestamp": "2026-04-25 06:57:58,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8929
          },
          {
            "timestamp": "2026-04-25 06:57:58,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8930
          },
          {
            "timestamp": "2026-04-25 06:57:58,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8931
          },
          {
            "timestamp": "2026-04-25 06:57:58,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8932
          },
          {
            "timestamp": "2026-04-25 06:57:58,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8933
          },
          {
            "timestamp": "2026-04-25 06:57:58,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8934
          },
          {
            "timestamp": "2026-04-25 06:57:58,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8935
          },
          {
            "timestamp": "2026-04-25 06:57:58,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8936
          },
          {
            "timestamp": "2026-04-25 06:57:58,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8937
          },
          {
            "timestamp": "2026-04-25 06:57:58,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8938
          },
          {
            "timestamp": "2026-04-25 06:57:58,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8939
          },
          {
            "timestamp": "2026-04-25 06:57:58,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8940
          },
          {
            "timestamp": "2026-04-25 06:57:58,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8941
          },
          {
            "timestamp": "2026-04-25 06:57:58,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8942
          },
          {
            "timestamp": "2026-04-25 06:57:58,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8943
          },
          {
            "timestamp": "2026-04-25 06:57:58,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8944
          },
          {
            "timestamp": "2026-04-25 06:57:58,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8945
          },
          {
            "timestamp": "2026-04-25 06:57:58,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8946
          },
          {
            "timestamp": "2026-04-25 06:57:58,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 8947
          },
          {
            "timestamp": "2026-04-25 06:57:58,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 8948
          },
          {
            "timestamp": "2026-04-25 06:57:58,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8949
          },
          {
            "timestamp": "2026-04-25 06:57:58,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8950
          },
          {
            "timestamp": "2026-04-25 06:57:58,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8951
          },
          {
            "timestamp": "2026-04-25 06:57:58,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8952
          },
          {
            "timestamp": "2026-04-25 06:57:58,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8953
          },
          {
            "timestamp": "2026-04-25 06:57:58,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8954
          },
          {
            "timestamp": "2026-04-25 06:57:58,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8955
          },
          {
            "timestamp": "2026-04-25 06:57:58,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8956
          },
          {
            "timestamp": "2026-04-25 06:57:58,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8957
          },
          {
            "timestamp": "2026-04-25 06:57:58,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8958
          },
          {
            "timestamp": "2026-04-25 06:57:58,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8959
          },
          {
            "timestamp": "2026-04-25 06:57:58,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8960
          },
          {
            "timestamp": "2026-04-25 06:57:58,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8961
          },
          {
            "timestamp": "2026-04-25 06:57:58,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8962
          },
          {
            "timestamp": "2026-04-25 06:57:58,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8963
          },
          {
            "timestamp": "2026-04-25 06:57:58,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8964
          },
          {
            "timestamp": "2026-04-25 06:57:58,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8965
          },
          {
            "timestamp": "2026-04-25 06:57:58,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8966
          },
          {
            "timestamp": "2026-04-25 06:57:59,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8967
          },
          {
            "timestamp": "2026-04-25 06:57:59,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8968
          },
          {
            "timestamp": "2026-04-25 06:57:59,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8969
          },
          {
            "timestamp": "2026-04-25 06:57:59,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8970
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 8971
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8972
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 8973
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8974
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8975
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8976
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8977
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8978
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8979
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 8980
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 8981
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000006c8",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1736"
              }
            ],
            "repeated": 0,
            "id": 8982
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1736"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 8983
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1736"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 8984
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000006c8"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 8985
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 8986
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 8987
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8988
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1736"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 8989
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8990
          },
          {
            "timestamp": "2026-04-25 06:57:59,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8991
          },
          {
            "timestamp": "2026-04-25 06:57:59,079",
            "thread_id": "5852",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1736"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 8992
          },
          {
            "timestamp": "2026-04-25 06:57:59,079",
            "thread_id": "5852",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 8993
          },
          {
            "timestamp": "2026-04-25 06:57:59,079",
            "thread_id": "5852",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 8994
          },
          {
            "timestamp": "2026-04-25 06:57:59,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 8995
          },
          {
            "timestamp": "2026-04-25 06:57:59,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 8996
          },
          {
            "timestamp": "2026-04-25 06:57:59,094",
            "thread_id": "5852",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 8997
          },
          {
            "timestamp": "2026-04-25 06:57:59,094",
            "thread_id": "5852",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 8998
          },
          {
            "timestamp": "2026-04-25 06:57:59,094",
            "thread_id": "5852",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 8999
          },
          {
            "timestamp": "2026-04-25 06:57:59,094",
            "thread_id": "5852",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1736"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 9000
          },
          {
            "timestamp": "2026-04-25 06:57:59,094",
            "thread_id": "5852",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1736"
              }
            ],
            "repeated": 0,
            "id": 9001
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 9002
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "5852",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1736"
              }
            ],
            "repeated": 0,
            "id": 9003
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "5852",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 9004
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "5852",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 9005
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9006
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9007
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 9008
          },
          {
            "timestamp": "2026-04-25 06:57:59,110",
            "thread_id": "5852",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 9009
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9010
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9011
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9012
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9013
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9014
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9015
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9016
          },
          {
            "timestamp": "2026-04-25 06:57:59,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9017
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "5976",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006cc"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc26a8"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "800"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 9018
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "5976",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000006cc",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc26a8"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "800"
              }
            ],
            "repeated": 0,
            "id": 9019
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "5976",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006cc"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "800"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 9020
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "800",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 9021
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "800",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9022
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "800",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 9023
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "800",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 9024
          },
          {
            "timestamp": "2026-04-25 06:57:59,157",
            "thread_id": "800",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x083d1000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 9025
          },
          {
            "timestamp": "2026-04-25 06:57:59,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9026
          },
          {
            "timestamp": "2026-04-25 06:57:59,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 9027
          },
          {
            "timestamp": "2026-04-25 06:57:59,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9028
          },
          {
            "timestamp": "2026-04-25 06:57:59,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9029
          },
          {
            "timestamp": "2026-04-25 06:57:59,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9030
          },
          {
            "timestamp": "2026-04-25 06:57:59,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9031
          },
          {
            "timestamp": "2026-04-25 06:57:59,251",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9032
          },
          {
            "timestamp": "2026-04-25 06:57:59,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9033
          },
          {
            "timestamp": "2026-04-25 06:57:59,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9034
          },
          {
            "timestamp": "2026-04-25 06:57:59,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9035
          },
          {
            "timestamp": "2026-04-25 06:57:59,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9036
          },
          {
            "timestamp": "2026-04-25 06:57:59,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9037
          },
          {
            "timestamp": "2026-04-25 06:57:59,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9038
          },
          {
            "timestamp": "2026-04-25 06:57:59,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9039
          },
          {
            "timestamp": "2026-04-25 06:57:59,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9040
          },
          {
            "timestamp": "2026-04-25 06:57:59,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9041
          },
          {
            "timestamp": "2026-04-25 06:57:59,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9042
          },
          {
            "timestamp": "2026-04-25 06:57:59,313",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9043
          },
          {
            "timestamp": "2026-04-25 06:57:59,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9044
          },
          {
            "timestamp": "2026-04-25 06:57:59,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9045
          },
          {
            "timestamp": "2026-04-25 06:57:59,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9046
          },
          {
            "timestamp": "2026-04-25 06:57:59,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9047
          },
          {
            "timestamp": "2026-04-25 06:57:59,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9048
          },
          {
            "timestamp": "2026-04-25 06:57:59,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9049
          },
          {
            "timestamp": "2026-04-25 06:57:59,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9050
          },
          {
            "timestamp": "2026-04-25 06:57:59,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9051
          },
          {
            "timestamp": "2026-04-25 06:57:59,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9052
          },
          {
            "timestamp": "2026-04-25 06:57:59,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9053
          },
          {
            "timestamp": "2026-04-25 06:57:59,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9054
          },
          {
            "timestamp": "2026-04-25 06:57:59,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9055
          },
          {
            "timestamp": "2026-04-25 06:57:59,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9056
          },
          {
            "timestamp": "2026-04-25 06:57:59,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9057
          },
          {
            "timestamp": "2026-04-25 06:57:59,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9058
          },
          {
            "timestamp": "2026-04-25 06:57:59,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9059
          },
          {
            "timestamp": "2026-04-25 06:57:59,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9060
          },
          {
            "timestamp": "2026-04-25 06:57:59,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9061
          },
          {
            "timestamp": "2026-04-25 06:57:59,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9062
          },
          {
            "timestamp": "2026-04-25 06:57:59,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9063
          },
          {
            "timestamp": "2026-04-25 06:57:59,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9064
          },
          {
            "timestamp": "2026-04-25 06:57:59,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9065
          },
          {
            "timestamp": "2026-04-25 06:57:59,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9066
          },
          {
            "timestamp": "2026-04-25 06:57:59,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9067
          },
          {
            "timestamp": "2026-04-25 06:57:59,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9068
          },
          {
            "timestamp": "2026-04-25 06:57:59,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9069
          },
          {
            "timestamp": "2026-04-25 06:57:59,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9070
          },
          {
            "timestamp": "2026-04-25 06:57:59,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9071
          },
          {
            "timestamp": "2026-04-25 06:57:59,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9072
          },
          {
            "timestamp": "2026-04-25 06:57:59,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9073
          },
          {
            "timestamp": "2026-04-25 06:57:59,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9074
          },
          {
            "timestamp": "2026-04-25 06:57:59,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9075
          },
          {
            "timestamp": "2026-04-25 06:57:59,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9076
          },
          {
            "timestamp": "2026-04-25 06:57:59,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9077
          },
          {
            "timestamp": "2026-04-25 06:57:59,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9078
          },
          {
            "timestamp": "2026-04-25 06:57:59,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9079
          },
          {
            "timestamp": "2026-04-25 06:57:59,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9080
          },
          {
            "timestamp": "2026-04-25 06:57:59,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9081
          },
          {
            "timestamp": "2026-04-25 06:57:59,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9082
          },
          {
            "timestamp": "2026-04-25 06:57:59,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9083
          },
          {
            "timestamp": "2026-04-25 06:57:59,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9084
          },
          {
            "timestamp": "2026-04-25 06:57:59,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9085
          },
          {
            "timestamp": "2026-04-25 06:57:59,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9086
          },
          {
            "timestamp": "2026-04-25 06:57:59,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9087
          },
          {
            "timestamp": "2026-04-25 06:57:59,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9088
          },
          {
            "timestamp": "2026-04-25 06:57:59,829",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9089
          },
          {
            "timestamp": "2026-04-25 06:57:59,829",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9090
          },
          {
            "timestamp": "2026-04-25 06:57:59,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9091
          },
          {
            "timestamp": "2026-04-25 06:57:59,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9092
          },
          {
            "timestamp": "2026-04-25 06:57:59,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9093
          },
          {
            "timestamp": "2026-04-25 06:57:59,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9094
          },
          {
            "timestamp": "2026-04-25 06:57:59,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9095
          },
          {
            "timestamp": "2026-04-25 06:57:59,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9096
          },
          {
            "timestamp": "2026-04-25 06:57:59,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9097
          },
          {
            "timestamp": "2026-04-25 06:57:59,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9098
          },
          {
            "timestamp": "2026-04-25 06:57:59,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9099
          },
          {
            "timestamp": "2026-04-25 06:57:59,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9100
          },
          {
            "timestamp": "2026-04-25 06:57:59,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9101
          },
          {
            "timestamp": "2026-04-25 06:58:00,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9102
          },
          {
            "timestamp": "2026-04-25 06:58:00,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9103
          },
          {
            "timestamp": "2026-04-25 06:58:00,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9104
          },
          {
            "timestamp": "2026-04-25 06:58:00,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9105
          },
          {
            "timestamp": "2026-04-25 06:58:00,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9106
          },
          {
            "timestamp": "2026-04-25 06:58:00,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9107
          },
          {
            "timestamp": "2026-04-25 06:58:00,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9108
          },
          {
            "timestamp": "2026-04-25 06:58:00,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9109
          },
          {
            "timestamp": "2026-04-25 06:58:00,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9110
          },
          {
            "timestamp": "2026-04-25 06:58:00,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9111
          },
          {
            "timestamp": "2026-04-25 06:58:00,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9112
          },
          {
            "timestamp": "2026-04-25 06:58:00,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9113
          },
          {
            "timestamp": "2026-04-25 06:58:00,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9114
          },
          {
            "timestamp": "2026-04-25 06:58:00,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9115
          },
          {
            "timestamp": "2026-04-25 06:58:00,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9116
          },
          {
            "timestamp": "2026-04-25 06:58:00,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9117
          },
          {
            "timestamp": "2026-04-25 06:58:00,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9118
          },
          {
            "timestamp": "2026-04-25 06:58:00,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9119
          },
          {
            "timestamp": "2026-04-25 06:58:00,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9120
          },
          {
            "timestamp": "2026-04-25 06:58:00,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9121
          },
          {
            "timestamp": "2026-04-25 06:58:00,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9122
          },
          {
            "timestamp": "2026-04-25 06:58:00,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9123
          },
          {
            "timestamp": "2026-04-25 06:58:00,251",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9124
          },
          {
            "timestamp": "2026-04-25 06:58:00,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9125
          },
          {
            "timestamp": "2026-04-25 06:58:00,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9126
          },
          {
            "timestamp": "2026-04-25 06:58:00,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9127
          },
          {
            "timestamp": "2026-04-25 06:58:00,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9128
          },
          {
            "timestamp": "2026-04-25 06:58:00,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9129
          },
          {
            "timestamp": "2026-04-25 06:58:00,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9130
          },
          {
            "timestamp": "2026-04-25 06:58:00,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9131
          },
          {
            "timestamp": "2026-04-25 06:58:00,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9132
          },
          {
            "timestamp": "2026-04-25 06:58:00,344",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9133
          },
          {
            "timestamp": "2026-04-25 06:58:00,344",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9134
          },
          {
            "timestamp": "2026-04-25 06:58:00,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9135
          },
          {
            "timestamp": "2026-04-25 06:58:00,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9136
          },
          {
            "timestamp": "2026-04-25 06:58:00,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9137
          },
          {
            "timestamp": "2026-04-25 06:58:00,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9138
          },
          {
            "timestamp": "2026-04-25 06:58:00,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9139
          },
          {
            "timestamp": "2026-04-25 06:58:00,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9140
          },
          {
            "timestamp": "2026-04-25 06:58:00,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9141
          },
          {
            "timestamp": "2026-04-25 06:58:00,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9142
          },
          {
            "timestamp": "2026-04-25 06:58:00,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9143
          },
          {
            "timestamp": "2026-04-25 06:58:00,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9144
          },
          {
            "timestamp": "2026-04-25 06:58:00,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9145
          },
          {
            "timestamp": "2026-04-25 06:58:00,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9146
          },
          {
            "timestamp": "2026-04-25 06:58:00,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9147
          },
          {
            "timestamp": "2026-04-25 06:58:00,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9148
          },
          {
            "timestamp": "2026-04-25 06:58:00,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9149
          },
          {
            "timestamp": "2026-04-25 06:58:00,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9150
          },
          {
            "timestamp": "2026-04-25 06:58:00,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9151
          },
          {
            "timestamp": "2026-04-25 06:58:00,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9152
          },
          {
            "timestamp": "2026-04-25 06:58:00,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9153
          },
          {
            "timestamp": "2026-04-25 06:58:00,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9154
          },
          {
            "timestamp": "2026-04-25 06:58:00,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9155
          },
          {
            "timestamp": "2026-04-25 06:58:00,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9156
          },
          {
            "timestamp": "2026-04-25 06:58:00,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9157
          },
          {
            "timestamp": "2026-04-25 06:58:00,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9158
          },
          {
            "timestamp": "2026-04-25 06:58:00,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9159
          },
          {
            "timestamp": "2026-04-25 06:58:00,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9160
          },
          {
            "timestamp": "2026-04-25 06:58:00,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9161
          },
          {
            "timestamp": "2026-04-25 06:58:00,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9162
          },
          {
            "timestamp": "2026-04-25 06:58:00,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9163
          },
          {
            "timestamp": "2026-04-25 06:58:00,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9164
          },
          {
            "timestamp": "2026-04-25 06:58:00,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9165
          },
          {
            "timestamp": "2026-04-25 06:58:00,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9166
          },
          {
            "timestamp": "2026-04-25 06:58:00,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9167
          },
          {
            "timestamp": "2026-04-25 06:58:00,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9168
          },
          {
            "timestamp": "2026-04-25 06:58:00,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9169
          },
          {
            "timestamp": "2026-04-25 06:58:00,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9170
          },
          {
            "timestamp": "2026-04-25 06:58:00,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9171
          },
          {
            "timestamp": "2026-04-25 06:58:00,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9172
          },
          {
            "timestamp": "2026-04-25 06:58:00,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9173
          },
          {
            "timestamp": "2026-04-25 06:58:00,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9174
          },
          {
            "timestamp": "2026-04-25 06:58:00,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9175
          },
          {
            "timestamp": "2026-04-25 06:58:00,860",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9176
          },
          {
            "timestamp": "2026-04-25 06:58:00,860",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9177
          },
          {
            "timestamp": "2026-04-25 06:58:00,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9178
          },
          {
            "timestamp": "2026-04-25 06:58:00,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9179
          },
          {
            "timestamp": "2026-04-25 06:58:00,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9180
          },
          {
            "timestamp": "2026-04-25 06:58:00,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9181
          },
          {
            "timestamp": "2026-04-25 06:58:00,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9182
          },
          {
            "timestamp": "2026-04-25 06:58:00,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9183
          },
          {
            "timestamp": "2026-04-25 06:58:00,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9184
          },
          {
            "timestamp": "2026-04-25 06:58:00,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9185
          },
          {
            "timestamp": "2026-04-25 06:58:00,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9186
          },
          {
            "timestamp": "2026-04-25 06:58:01,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9187
          },
          {
            "timestamp": "2026-04-25 06:58:01,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9188
          },
          {
            "timestamp": "2026-04-25 06:58:01,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9189
          },
          {
            "timestamp": "2026-04-25 06:58:01,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9190
          },
          {
            "timestamp": "2026-04-25 06:58:01,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9191
          },
          {
            "timestamp": "2026-04-25 06:58:01,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9192
          },
          {
            "timestamp": "2026-04-25 06:58:01,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9193
          },
          {
            "timestamp": "2026-04-25 06:58:01,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9194
          },
          {
            "timestamp": "2026-04-25 06:58:01,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9195
          },
          {
            "timestamp": "2026-04-25 06:58:01,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9196
          },
          {
            "timestamp": "2026-04-25 06:58:01,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9197
          },
          {
            "timestamp": "2026-04-25 06:58:01,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9198
          },
          {
            "timestamp": "2026-04-25 06:58:01,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9199
          },
          {
            "timestamp": "2026-04-25 06:58:01,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9200
          },
          {
            "timestamp": "2026-04-25 06:58:01,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9201
          },
          {
            "timestamp": "2026-04-25 06:58:01,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9202
          },
          {
            "timestamp": "2026-04-25 06:58:01,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9203
          },
          {
            "timestamp": "2026-04-25 06:58:01,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9204
          },
          {
            "timestamp": "2026-04-25 06:58:01,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9205
          },
          {
            "timestamp": "2026-04-25 06:58:01,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9206
          },
          {
            "timestamp": "2026-04-25 06:58:01,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9207
          },
          {
            "timestamp": "2026-04-25 06:58:01,251",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9208
          },
          {
            "timestamp": "2026-04-25 06:58:01,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9209
          },
          {
            "timestamp": "2026-04-25 06:58:01,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9210
          },
          {
            "timestamp": "2026-04-25 06:58:01,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9211
          },
          {
            "timestamp": "2026-04-25 06:58:01,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9212
          },
          {
            "timestamp": "2026-04-25 06:58:01,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9213
          },
          {
            "timestamp": "2026-04-25 06:58:01,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9214
          },
          {
            "timestamp": "2026-04-25 06:58:01,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9215
          },
          {
            "timestamp": "2026-04-25 06:58:01,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9216
          },
          {
            "timestamp": "2026-04-25 06:58:01,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9217
          },
          {
            "timestamp": "2026-04-25 06:58:01,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9218
          },
          {
            "timestamp": "2026-04-25 06:58:01,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9219
          },
          {
            "timestamp": "2026-04-25 06:58:01,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9220
          },
          {
            "timestamp": "2026-04-25 06:58:01,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9221
          },
          {
            "timestamp": "2026-04-25 06:58:01,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9222
          },
          {
            "timestamp": "2026-04-25 06:58:01,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9223
          },
          {
            "timestamp": "2026-04-25 06:58:01,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9224
          },
          {
            "timestamp": "2026-04-25 06:58:01,376",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9225
          },
          {
            "timestamp": "2026-04-25 06:58:01,376",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9226
          },
          {
            "timestamp": "2026-04-25 06:58:01,438",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9227
          },
          {
            "timestamp": "2026-04-25 06:58:01,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9228
          },
          {
            "timestamp": "2026-04-25 06:58:01,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9229
          },
          {
            "timestamp": "2026-04-25 06:58:01,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9230
          },
          {
            "timestamp": "2026-04-25 06:58:01,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9231
          },
          {
            "timestamp": "2026-04-25 06:58:01,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9232
          },
          {
            "timestamp": "2026-04-25 06:58:01,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9233
          },
          {
            "timestamp": "2026-04-25 06:58:01,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9234
          },
          {
            "timestamp": "2026-04-25 06:58:01,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9235
          },
          {
            "timestamp": "2026-04-25 06:58:01,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9236
          },
          {
            "timestamp": "2026-04-25 06:58:01,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9237
          },
          {
            "timestamp": "2026-04-25 06:58:01,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9238
          },
          {
            "timestamp": "2026-04-25 06:58:01,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9239
          },
          {
            "timestamp": "2026-04-25 06:58:01,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9240
          },
          {
            "timestamp": "2026-04-25 06:58:01,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9241
          },
          {
            "timestamp": "2026-04-25 06:58:01,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9242
          },
          {
            "timestamp": "2026-04-25 06:58:01,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9243
          },
          {
            "timestamp": "2026-04-25 06:58:01,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9244
          },
          {
            "timestamp": "2026-04-25 06:58:01,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9245
          },
          {
            "timestamp": "2026-04-25 06:58:01,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9246
          },
          {
            "timestamp": "2026-04-25 06:58:01,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9247
          },
          {
            "timestamp": "2026-04-25 06:58:01,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9248
          },
          {
            "timestamp": "2026-04-25 06:58:01,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9249
          },
          {
            "timestamp": "2026-04-25 06:58:01,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9250
          },
          {
            "timestamp": "2026-04-25 06:58:01,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9251
          },
          {
            "timestamp": "2026-04-25 06:58:01,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9252
          },
          {
            "timestamp": "2026-04-25 06:58:01,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9253
          },
          {
            "timestamp": "2026-04-25 06:58:01,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9254
          },
          {
            "timestamp": "2026-04-25 06:58:01,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9255
          },
          {
            "timestamp": "2026-04-25 06:58:01,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9256
          },
          {
            "timestamp": "2026-04-25 06:58:01,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9257
          },
          {
            "timestamp": "2026-04-25 06:58:01,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9258
          },
          {
            "timestamp": "2026-04-25 06:58:01,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9259
          },
          {
            "timestamp": "2026-04-25 06:58:01,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9260
          },
          {
            "timestamp": "2026-04-25 06:58:01,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9261
          },
          {
            "timestamp": "2026-04-25 06:58:01,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9262
          },
          {
            "timestamp": "2026-04-25 06:58:01,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9263
          },
          {
            "timestamp": "2026-04-25 06:58:01,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9264
          },
          {
            "timestamp": "2026-04-25 06:58:01,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9265
          },
          {
            "timestamp": "2026-04-25 06:58:01,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9266
          },
          {
            "timestamp": "2026-04-25 06:58:01,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9267
          },
          {
            "timestamp": "2026-04-25 06:58:01,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9268
          },
          {
            "timestamp": "2026-04-25 06:58:01,891",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9269
          },
          {
            "timestamp": "2026-04-25 06:58:01,891",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9270
          },
          {
            "timestamp": "2026-04-25 06:58:01,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9271
          },
          {
            "timestamp": "2026-04-25 06:58:01,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9272
          },
          {
            "timestamp": "2026-04-25 06:58:01,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9273
          },
          {
            "timestamp": "2026-04-25 06:58:01,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9274
          },
          {
            "timestamp": "2026-04-25 06:58:01,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9275
          },
          {
            "timestamp": "2026-04-25 06:58:02,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9276
          },
          {
            "timestamp": "2026-04-25 06:58:02,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9277
          },
          {
            "timestamp": "2026-04-25 06:58:02,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9278
          },
          {
            "timestamp": "2026-04-25 06:58:02,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9279
          },
          {
            "timestamp": "2026-04-25 06:58:02,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9280
          },
          {
            "timestamp": "2026-04-25 06:58:02,063",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9281
          },
          {
            "timestamp": "2026-04-25 06:58:02,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9282
          },
          {
            "timestamp": "2026-04-25 06:58:02,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9283
          },
          {
            "timestamp": "2026-04-25 06:58:02,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9284
          },
          {
            "timestamp": "2026-04-25 06:58:02,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9285
          },
          {
            "timestamp": "2026-04-25 06:58:02,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9286
          },
          {
            "timestamp": "2026-04-25 06:58:02,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9287
          },
          {
            "timestamp": "2026-04-25 06:58:02,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9288
          },
          {
            "timestamp": "2026-04-25 06:58:02,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9289
          },
          {
            "timestamp": "2026-04-25 06:58:02,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9290
          },
          {
            "timestamp": "2026-04-25 06:58:02,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9291
          },
          {
            "timestamp": "2026-04-25 06:58:02,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9292
          },
          {
            "timestamp": "2026-04-25 06:58:02,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9293
          },
          {
            "timestamp": "2026-04-25 06:58:02,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9294
          },
          {
            "timestamp": "2026-04-25 06:58:02,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9295
          },
          {
            "timestamp": "2026-04-25 06:58:02,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9296
          },
          {
            "timestamp": "2026-04-25 06:58:02,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9297
          },
          {
            "timestamp": "2026-04-25 06:58:02,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9298
          },
          {
            "timestamp": "2026-04-25 06:58:02,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9299
          },
          {
            "timestamp": "2026-04-25 06:58:02,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9300
          },
          {
            "timestamp": "2026-04-25 06:58:02,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9301
          },
          {
            "timestamp": "2026-04-25 06:58:02,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9302
          },
          {
            "timestamp": "2026-04-25 06:58:02,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9303
          },
          {
            "timestamp": "2026-04-25 06:58:02,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9304
          },
          {
            "timestamp": "2026-04-25 06:58:02,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9305
          },
          {
            "timestamp": "2026-04-25 06:58:02,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9306
          },
          {
            "timestamp": "2026-04-25 06:58:02,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9307
          },
          {
            "timestamp": "2026-04-25 06:58:02,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9308
          },
          {
            "timestamp": "2026-04-25 06:58:02,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9309
          },
          {
            "timestamp": "2026-04-25 06:58:02,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9310
          },
          {
            "timestamp": "2026-04-25 06:58:02,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9311
          },
          {
            "timestamp": "2026-04-25 06:58:02,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9312
          },
          {
            "timestamp": "2026-04-25 06:58:02,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9313
          },
          {
            "timestamp": "2026-04-25 06:58:02,407",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9314
          },
          {
            "timestamp": "2026-04-25 06:58:02,407",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9315
          },
          {
            "timestamp": "2026-04-25 06:58:02,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9316
          },
          {
            "timestamp": "2026-04-25 06:58:02,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9317
          },
          {
            "timestamp": "2026-04-25 06:58:02,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9318
          },
          {
            "timestamp": "2026-04-25 06:58:02,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9319
          },
          {
            "timestamp": "2026-04-25 06:58:02,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9320
          },
          {
            "timestamp": "2026-04-25 06:58:02,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9321
          },
          {
            "timestamp": "2026-04-25 06:58:02,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9322
          },
          {
            "timestamp": "2026-04-25 06:58:02,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9323
          },
          {
            "timestamp": "2026-04-25 06:58:02,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9324
          },
          {
            "timestamp": "2026-04-25 06:58:02,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9325
          },
          {
            "timestamp": "2026-04-25 06:58:02,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9326
          },
          {
            "timestamp": "2026-04-25 06:58:02,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9327
          },
          {
            "timestamp": "2026-04-25 06:58:02,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9328
          },
          {
            "timestamp": "2026-04-25 06:58:02,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9329
          },
          {
            "timestamp": "2026-04-25 06:58:02,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9330
          },
          {
            "timestamp": "2026-04-25 06:58:02,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9331
          },
          {
            "timestamp": "2026-04-25 06:58:02,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9332
          },
          {
            "timestamp": "2026-04-25 06:58:02,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9333
          },
          {
            "timestamp": "2026-04-25 06:58:02,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9334
          },
          {
            "timestamp": "2026-04-25 06:58:02,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9335
          },
          {
            "timestamp": "2026-04-25 06:58:02,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9336
          },
          {
            "timestamp": "2026-04-25 06:58:02,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9337
          },
          {
            "timestamp": "2026-04-25 06:58:02,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9338
          },
          {
            "timestamp": "2026-04-25 06:58:02,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9339
          },
          {
            "timestamp": "2026-04-25 06:58:02,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9340
          },
          {
            "timestamp": "2026-04-25 06:58:02,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9341
          },
          {
            "timestamp": "2026-04-25 06:58:02,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9342
          },
          {
            "timestamp": "2026-04-25 06:58:02,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9343
          },
          {
            "timestamp": "2026-04-25 06:58:02,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9344
          },
          {
            "timestamp": "2026-04-25 06:58:02,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9345
          },
          {
            "timestamp": "2026-04-25 06:58:02,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9346
          },
          {
            "timestamp": "2026-04-25 06:58:02,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9347
          },
          {
            "timestamp": "2026-04-25 06:58:02,813",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9348
          },
          {
            "timestamp": "2026-04-25 06:58:02,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9349
          },
          {
            "timestamp": "2026-04-25 06:58:02,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9350
          },
          {
            "timestamp": "2026-04-25 06:58:02,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9351
          },
          {
            "timestamp": "2026-04-25 06:58:02,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9352
          },
          {
            "timestamp": "2026-04-25 06:58:02,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9353
          },
          {
            "timestamp": "2026-04-25 06:58:02,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9354
          },
          {
            "timestamp": "2026-04-25 06:58:02,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9355
          },
          {
            "timestamp": "2026-04-25 06:58:02,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9356
          },
          {
            "timestamp": "2026-04-25 06:58:02,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9357
          },
          {
            "timestamp": "2026-04-25 06:58:02,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9358
          },
          {
            "timestamp": "2026-04-25 06:58:02,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9359
          },
          {
            "timestamp": "2026-04-25 06:58:02,922",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9360
          },
          {
            "timestamp": "2026-04-25 06:58:02,922",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9361
          },
          {
            "timestamp": "2026-04-25 06:58:02,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9362
          },
          {
            "timestamp": "2026-04-25 06:58:02,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9363
          },
          {
            "timestamp": "2026-04-25 06:58:02,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9364
          },
          {
            "timestamp": "2026-04-25 06:58:02,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9365
          },
          {
            "timestamp": "2026-04-25 06:58:02,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9366
          },
          {
            "timestamp": "2026-04-25 06:58:03,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9367
          },
          {
            "timestamp": "2026-04-25 06:58:03,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9368
          },
          {
            "timestamp": "2026-04-25 06:58:03,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9369
          },
          {
            "timestamp": "2026-04-25 06:58:03,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9370
          },
          {
            "timestamp": "2026-04-25 06:58:03,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9371
          },
          {
            "timestamp": "2026-04-25 06:58:03,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9372
          },
          {
            "timestamp": "2026-04-25 06:58:03,063",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9373
          },
          {
            "timestamp": "2026-04-25 06:58:03,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9374
          },
          {
            "timestamp": "2026-04-25 06:58:03,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9375
          },
          {
            "timestamp": "2026-04-25 06:58:03,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9376
          },
          {
            "timestamp": "2026-04-25 06:58:03,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9377
          },
          {
            "timestamp": "2026-04-25 06:58:03,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9378
          },
          {
            "timestamp": "2026-04-25 06:58:03,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9379
          },
          {
            "timestamp": "2026-04-25 06:58:03,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9380
          },
          {
            "timestamp": "2026-04-25 06:58:03,126",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9381
          },
          {
            "timestamp": "2026-04-25 06:58:03,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9382
          },
          {
            "timestamp": "2026-04-25 06:58:03,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9383
          },
          {
            "timestamp": "2026-04-25 06:58:03,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9384
          },
          {
            "timestamp": "2026-04-25 06:58:03,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9385
          },
          {
            "timestamp": "2026-04-25 06:58:03,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9386
          },
          {
            "timestamp": "2026-04-25 06:58:03,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9387
          },
          {
            "timestamp": "2026-04-25 06:58:03,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9388
          },
          {
            "timestamp": "2026-04-25 06:58:03,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9389
          },
          {
            "timestamp": "2026-04-25 06:58:03,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9390
          },
          {
            "timestamp": "2026-04-25 06:58:03,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9391
          },
          {
            "timestamp": "2026-04-25 06:58:03,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9392
          },
          {
            "timestamp": "2026-04-25 06:58:03,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9393
          },
          {
            "timestamp": "2026-04-25 06:58:03,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9394
          },
          {
            "timestamp": "2026-04-25 06:58:03,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9395
          },
          {
            "timestamp": "2026-04-25 06:58:03,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9396
          },
          {
            "timestamp": "2026-04-25 06:58:03,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9397
          },
          {
            "timestamp": "2026-04-25 06:58:03,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9398
          },
          {
            "timestamp": "2026-04-25 06:58:03,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9399
          },
          {
            "timestamp": "2026-04-25 06:58:03,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9400
          },
          {
            "timestamp": "2026-04-25 06:58:03,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9401
          },
          {
            "timestamp": "2026-04-25 06:58:03,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9402
          },
          {
            "timestamp": "2026-04-25 06:58:03,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9403
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x050759c3",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9404
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 9405
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9406
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9407
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9408
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9409
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x0507593a",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9410
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000005ac",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1452"
              }
            ],
            "repeated": 0,
            "id": 9411
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1452"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 9412
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1452"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 9413
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 9414
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9415
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000005ac"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 9416
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1452"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 9417
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9418
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9419
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9420
          },
          {
            "timestamp": "2026-04-25 06:58:03,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9421
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9422
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9423
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9424
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9425
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9426
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9427
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9428
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1452"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 9429
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006cc"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00@u\\x00T\\x19\\x00\\x00 \\x03\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "800"
              }
            ],
            "repeated": 0,
            "id": 9430
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 9431
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 9432
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 9433
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 9434
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 9435
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1452"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 9436
          },
          {
            "timestamp": "2026-04-25 06:58:03,438",
            "thread_id": "800",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1452"
              }
            ],
            "repeated": 0,
            "id": 9437
          },
          {
            "timestamp": "2026-04-25 06:58:03,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9438
          },
          {
            "timestamp": "2026-04-25 06:58:03,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9439
          },
          {
            "timestamp": "2026-04-25 06:58:03,454",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 9440
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1452"
              }
            ],
            "repeated": 0,
            "id": 9441
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0507da9f",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 8,
            "id": 9442
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 9443
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 9444
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9445
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9446
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 9447
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 9448
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9449
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9450
          },
          {
            "timestamp": "2026-04-25 06:58:03,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9451
          },
          {
            "timestamp": "2026-04-25 06:58:03,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9452
          },
          {
            "timestamp": "2026-04-25 06:58:03,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9453
          },
          {
            "timestamp": "2026-04-25 06:58:03,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9454
          },
          {
            "timestamp": "2026-04-25 06:58:03,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9455
          },
          {
            "timestamp": "2026-04-25 06:58:03,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9456
          },
          {
            "timestamp": "2026-04-25 06:58:03,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9457
          },
          {
            "timestamp": "2026-04-25 06:58:03,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9458
          },
          {
            "timestamp": "2026-04-25 06:58:03,563",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9459
          },
          {
            "timestamp": "2026-04-25 06:58:03,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9460
          },
          {
            "timestamp": "2026-04-25 06:58:03,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9461
          },
          {
            "timestamp": "2026-04-25 06:58:03,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9462
          },
          {
            "timestamp": "2026-04-25 06:58:03,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9463
          },
          {
            "timestamp": "2026-04-25 06:58:03,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9464
          },
          {
            "timestamp": "2026-04-25 06:58:03,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9465
          },
          {
            "timestamp": "2026-04-25 06:58:03,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9466
          },
          {
            "timestamp": "2026-04-25 06:58:03,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9467
          },
          {
            "timestamp": "2026-04-25 06:58:03,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9468
          },
          {
            "timestamp": "2026-04-25 06:58:03,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9469
          },
          {
            "timestamp": "2026-04-25 06:58:03,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9470
          },
          {
            "timestamp": "2026-04-25 06:58:03,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9471
          },
          {
            "timestamp": "2026-04-25 06:58:03,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9472
          },
          {
            "timestamp": "2026-04-25 06:58:03,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9473
          },
          {
            "timestamp": "2026-04-25 06:58:03,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9474
          },
          {
            "timestamp": "2026-04-25 06:58:03,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9475
          },
          {
            "timestamp": "2026-04-25 06:58:03,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9476
          },
          {
            "timestamp": "2026-04-25 06:58:03,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9477
          },
          {
            "timestamp": "2026-04-25 06:58:03,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9478
          },
          {
            "timestamp": "2026-04-25 06:58:03,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9479
          },
          {
            "timestamp": "2026-04-25 06:58:03,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9480
          },
          {
            "timestamp": "2026-04-25 06:58:03,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9481
          },
          {
            "timestamp": "2026-04-25 06:58:03,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9482
          },
          {
            "timestamp": "2026-04-25 06:58:03,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9483
          },
          {
            "timestamp": "2026-04-25 06:58:03,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9484
          },
          {
            "timestamp": "2026-04-25 06:58:03,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9485
          },
          {
            "timestamp": "2026-04-25 06:58:03,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9486
          },
          {
            "timestamp": "2026-04-25 06:58:03,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9487
          },
          {
            "timestamp": "2026-04-25 06:58:03,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9488
          },
          {
            "timestamp": "2026-04-25 06:58:03,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9489
          },
          {
            "timestamp": "2026-04-25 06:58:03,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9490
          },
          {
            "timestamp": "2026-04-25 06:58:03,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9491
          },
          {
            "timestamp": "2026-04-25 06:58:03,954",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9492
          },
          {
            "timestamp": "2026-04-25 06:58:03,954",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9493
          },
          {
            "timestamp": "2026-04-25 06:58:04,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9494
          },
          {
            "timestamp": "2026-04-25 06:58:04,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9495
          },
          {
            "timestamp": "2026-04-25 06:58:04,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9496
          },
          {
            "timestamp": "2026-04-25 06:58:04,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9497
          },
          {
            "timestamp": "2026-04-25 06:58:04,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9498
          },
          {
            "timestamp": "2026-04-25 06:58:04,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9499
          },
          {
            "timestamp": "2026-04-25 06:58:04,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9500
          },
          {
            "timestamp": "2026-04-25 06:58:04,063",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9501
          },
          {
            "timestamp": "2026-04-25 06:58:04,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9502
          },
          {
            "timestamp": "2026-04-25 06:58:04,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9503
          },
          {
            "timestamp": "2026-04-25 06:58:04,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9504
          },
          {
            "timestamp": "2026-04-25 06:58:04,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9505
          },
          {
            "timestamp": "2026-04-25 06:58:04,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9506
          },
          {
            "timestamp": "2026-04-25 06:58:04,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9507
          },
          {
            "timestamp": "2026-04-25 06:58:04,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9508
          },
          {
            "timestamp": "2026-04-25 06:58:04,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9509
          },
          {
            "timestamp": "2026-04-25 06:58:04,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9510
          },
          {
            "timestamp": "2026-04-25 06:58:04,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9511
          },
          {
            "timestamp": "2026-04-25 06:58:04,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9512
          },
          {
            "timestamp": "2026-04-25 06:58:04,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9513
          },
          {
            "timestamp": "2026-04-25 06:58:04,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9514
          },
          {
            "timestamp": "2026-04-25 06:58:04,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9515
          },
          {
            "timestamp": "2026-04-25 06:58:04,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9516
          },
          {
            "timestamp": "2026-04-25 06:58:04,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9517
          },
          {
            "timestamp": "2026-04-25 06:58:04,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9518
          },
          {
            "timestamp": "2026-04-25 06:58:04,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9519
          },
          {
            "timestamp": "2026-04-25 06:58:04,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9520
          },
          {
            "timestamp": "2026-04-25 06:58:04,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9521
          },
          {
            "timestamp": "2026-04-25 06:58:04,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9522
          },
          {
            "timestamp": "2026-04-25 06:58:04,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9523
          },
          {
            "timestamp": "2026-04-25 06:58:04,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9524
          },
          {
            "timestamp": "2026-04-25 06:58:04,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9525
          },
          {
            "timestamp": "2026-04-25 06:58:04,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9526
          },
          {
            "timestamp": "2026-04-25 06:58:04,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9527
          },
          {
            "timestamp": "2026-04-25 06:58:04,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9528
          },
          {
            "timestamp": "2026-04-25 06:58:04,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9529
          },
          {
            "timestamp": "2026-04-25 06:58:04,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9530
          },
          {
            "timestamp": "2026-04-25 06:58:04,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9531
          },
          {
            "timestamp": "2026-04-25 06:58:04,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9532
          },
          {
            "timestamp": "2026-04-25 06:58:04,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9533
          },
          {
            "timestamp": "2026-04-25 06:58:04,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9534
          },
          {
            "timestamp": "2026-04-25 06:58:04,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9535
          },
          {
            "timestamp": "2026-04-25 06:58:04,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9536
          },
          {
            "timestamp": "2026-04-25 06:58:04,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9537
          },
          {
            "timestamp": "2026-04-25 06:58:04,469",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9538
          },
          {
            "timestamp": "2026-04-25 06:58:04,469",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9539
          },
          {
            "timestamp": "2026-04-25 06:58:04,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9540
          },
          {
            "timestamp": "2026-04-25 06:58:04,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9541
          },
          {
            "timestamp": "2026-04-25 06:58:04,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9542
          },
          {
            "timestamp": "2026-04-25 06:58:04,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9543
          },
          {
            "timestamp": "2026-04-25 06:58:04,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9544
          },
          {
            "timestamp": "2026-04-25 06:58:04,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9545
          },
          {
            "timestamp": "2026-04-25 06:58:04,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9546
          },
          {
            "timestamp": "2026-04-25 06:58:04,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9547
          },
          {
            "timestamp": "2026-04-25 06:58:04,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9548
          },
          {
            "timestamp": "2026-04-25 06:58:04,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9549
          },
          {
            "timestamp": "2026-04-25 06:58:04,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9550
          },
          {
            "timestamp": "2026-04-25 06:58:04,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9551
          },
          {
            "timestamp": "2026-04-25 06:58:04,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9552
          },
          {
            "timestamp": "2026-04-25 06:58:04,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9553
          },
          {
            "timestamp": "2026-04-25 06:58:04,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9554
          },
          {
            "timestamp": "2026-04-25 06:58:04,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9555
          },
          {
            "timestamp": "2026-04-25 06:58:04,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9556
          },
          {
            "timestamp": "2026-04-25 06:58:04,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9557
          },
          {
            "timestamp": "2026-04-25 06:58:04,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9558
          },
          {
            "timestamp": "2026-04-25 06:58:04,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9559
          },
          {
            "timestamp": "2026-04-25 06:58:04,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9560
          },
          {
            "timestamp": "2026-04-25 06:58:04,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9561
          },
          {
            "timestamp": "2026-04-25 06:58:04,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9562
          },
          {
            "timestamp": "2026-04-25 06:58:04,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9563
          },
          {
            "timestamp": "2026-04-25 06:58:04,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9564
          },
          {
            "timestamp": "2026-04-25 06:58:04,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9565
          },
          {
            "timestamp": "2026-04-25 06:58:04,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9566
          },
          {
            "timestamp": "2026-04-25 06:58:04,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9567
          },
          {
            "timestamp": "2026-04-25 06:58:04,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9568
          },
          {
            "timestamp": "2026-04-25 06:58:04,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9569
          },
          {
            "timestamp": "2026-04-25 06:58:04,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9570
          },
          {
            "timestamp": "2026-04-25 06:58:04,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9571
          },
          {
            "timestamp": "2026-04-25 06:58:04,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9572
          },
          {
            "timestamp": "2026-04-25 06:58:04,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9573
          },
          {
            "timestamp": "2026-04-25 06:58:04,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9574
          },
          {
            "timestamp": "2026-04-25 06:58:04,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9575
          },
          {
            "timestamp": "2026-04-25 06:58:04,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9576
          },
          {
            "timestamp": "2026-04-25 06:58:04,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9577
          },
          {
            "timestamp": "2026-04-25 06:58:04,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9578
          },
          {
            "timestamp": "2026-04-25 06:58:04,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9579
          },
          {
            "timestamp": "2026-04-25 06:58:04,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9580
          },
          {
            "timestamp": "2026-04-25 06:58:04,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9581
          },
          {
            "timestamp": "2026-04-25 06:58:04,985",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9582
          },
          {
            "timestamp": "2026-04-25 06:58:04,985",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9583
          },
          {
            "timestamp": "2026-04-25 06:58:05,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9584
          },
          {
            "timestamp": "2026-04-25 06:58:05,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9585
          },
          {
            "timestamp": "2026-04-25 06:58:05,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9586
          },
          {
            "timestamp": "2026-04-25 06:58:05,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9587
          },
          {
            "timestamp": "2026-04-25 06:58:05,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9588
          },
          {
            "timestamp": "2026-04-25 06:58:05,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9589
          },
          {
            "timestamp": "2026-04-25 06:58:05,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9590
          },
          {
            "timestamp": "2026-04-25 06:58:05,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9591
          },
          {
            "timestamp": "2026-04-25 06:58:05,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9592
          },
          {
            "timestamp": "2026-04-25 06:58:05,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9593
          },
          {
            "timestamp": "2026-04-25 06:58:05,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9594
          },
          {
            "timestamp": "2026-04-25 06:58:05,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9595
          },
          {
            "timestamp": "2026-04-25 06:58:05,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9596
          },
          {
            "timestamp": "2026-04-25 06:58:05,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9597
          },
          {
            "timestamp": "2026-04-25 06:58:05,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9598
          },
          {
            "timestamp": "2026-04-25 06:58:05,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9599
          },
          {
            "timestamp": "2026-04-25 06:58:05,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9600
          },
          {
            "timestamp": "2026-04-25 06:58:05,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9601
          },
          {
            "timestamp": "2026-04-25 06:58:05,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9602
          },
          {
            "timestamp": "2026-04-25 06:58:05,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9603
          },
          {
            "timestamp": "2026-04-25 06:58:05,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9604
          },
          {
            "timestamp": "2026-04-25 06:58:05,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9605
          },
          {
            "timestamp": "2026-04-25 06:58:05,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9606
          },
          {
            "timestamp": "2026-04-25 06:58:05,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9607
          },
          {
            "timestamp": "2026-04-25 06:58:05,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9608
          },
          {
            "timestamp": "2026-04-25 06:58:05,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9609
          },
          {
            "timestamp": "2026-04-25 06:58:05,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9610
          },
          {
            "timestamp": "2026-04-25 06:58:05,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9611
          },
          {
            "timestamp": "2026-04-25 06:58:05,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9612
          },
          {
            "timestamp": "2026-04-25 06:58:05,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9613
          },
          {
            "timestamp": "2026-04-25 06:58:05,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9614
          },
          {
            "timestamp": "2026-04-25 06:58:05,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9615
          },
          {
            "timestamp": "2026-04-25 06:58:05,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9616
          },
          {
            "timestamp": "2026-04-25 06:58:05,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9617
          },
          {
            "timestamp": "2026-04-25 06:58:05,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9618
          },
          {
            "timestamp": "2026-04-25 06:58:05,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9619
          },
          {
            "timestamp": "2026-04-25 06:58:05,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9620
          },
          {
            "timestamp": "2026-04-25 06:58:05,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9621
          },
          {
            "timestamp": "2026-04-25 06:58:05,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9622
          },
          {
            "timestamp": "2026-04-25 06:58:05,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9623
          },
          {
            "timestamp": "2026-04-25 06:58:05,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9624
          },
          {
            "timestamp": "2026-04-25 06:58:05,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9625
          },
          {
            "timestamp": "2026-04-25 06:58:05,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9626
          },
          {
            "timestamp": "2026-04-25 06:58:05,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9627
          },
          {
            "timestamp": "2026-04-25 06:58:05,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9628
          },
          {
            "timestamp": "2026-04-25 06:58:05,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9629
          },
          {
            "timestamp": "2026-04-25 06:58:05,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9630
          },
          {
            "timestamp": "2026-04-25 06:58:05,501",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9631
          },
          {
            "timestamp": "2026-04-25 06:58:05,501",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9632
          },
          {
            "timestamp": "2026-04-25 06:58:05,563",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9633
          },
          {
            "timestamp": "2026-04-25 06:58:05,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9634
          },
          {
            "timestamp": "2026-04-25 06:58:05,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9635
          },
          {
            "timestamp": "2026-04-25 06:58:05,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9636
          },
          {
            "timestamp": "2026-04-25 06:58:05,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9637
          },
          {
            "timestamp": "2026-04-25 06:58:05,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9638
          },
          {
            "timestamp": "2026-04-25 06:58:05,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9639
          },
          {
            "timestamp": "2026-04-25 06:58:05,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9640
          },
          {
            "timestamp": "2026-04-25 06:58:05,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9641
          },
          {
            "timestamp": "2026-04-25 06:58:05,688",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9642
          },
          {
            "timestamp": "2026-04-25 06:58:05,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9643
          },
          {
            "timestamp": "2026-04-25 06:58:05,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9644
          },
          {
            "timestamp": "2026-04-25 06:58:05,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9645
          },
          {
            "timestamp": "2026-04-25 06:58:05,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9646
          },
          {
            "timestamp": "2026-04-25 06:58:05,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9647
          },
          {
            "timestamp": "2026-04-25 06:58:05,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9648
          },
          {
            "timestamp": "2026-04-25 06:58:05,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9649
          },
          {
            "timestamp": "2026-04-25 06:58:05,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9650
          },
          {
            "timestamp": "2026-04-25 06:58:05,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9651
          },
          {
            "timestamp": "2026-04-25 06:58:05,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9652
          },
          {
            "timestamp": "2026-04-25 06:58:05,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9653
          },
          {
            "timestamp": "2026-04-25 06:58:05,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9654
          },
          {
            "timestamp": "2026-04-25 06:58:05,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9655
          },
          {
            "timestamp": "2026-04-25 06:58:05,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9656
          },
          {
            "timestamp": "2026-04-25 06:58:05,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9657
          },
          {
            "timestamp": "2026-04-25 06:58:05,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9658
          },
          {
            "timestamp": "2026-04-25 06:58:05,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9659
          },
          {
            "timestamp": "2026-04-25 06:58:05,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9660
          },
          {
            "timestamp": "2026-04-25 06:58:05,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9661
          },
          {
            "timestamp": "2026-04-25 06:58:05,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9662
          },
          {
            "timestamp": "2026-04-25 06:58:05,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9663
          },
          {
            "timestamp": "2026-04-25 06:58:05,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9664
          },
          {
            "timestamp": "2026-04-25 06:58:05,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9665
          },
          {
            "timestamp": "2026-04-25 06:58:05,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9666
          },
          {
            "timestamp": "2026-04-25 06:58:06,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9667
          },
          {
            "timestamp": "2026-04-25 06:58:06,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9668
          },
          {
            "timestamp": "2026-04-25 06:58:06,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9669
          },
          {
            "timestamp": "2026-04-25 06:58:06,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9670
          },
          {
            "timestamp": "2026-04-25 06:58:06,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9671
          },
          {
            "timestamp": "2026-04-25 06:58:06,016",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9672
          },
          {
            "timestamp": "2026-04-25 06:58:06,016",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9673
          },
          {
            "timestamp": "2026-04-25 06:58:06,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9674
          },
          {
            "timestamp": "2026-04-25 06:58:06,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9675
          },
          {
            "timestamp": "2026-04-25 06:58:06,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9676
          },
          {
            "timestamp": "2026-04-25 06:58:06,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9677
          },
          {
            "timestamp": "2026-04-25 06:58:06,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9678
          },
          {
            "timestamp": "2026-04-25 06:58:06,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9679
          },
          {
            "timestamp": "2026-04-25 06:58:06,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9680
          },
          {
            "timestamp": "2026-04-25 06:58:06,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9681
          },
          {
            "timestamp": "2026-04-25 06:58:06,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9682
          },
          {
            "timestamp": "2026-04-25 06:58:06,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9683
          },
          {
            "timestamp": "2026-04-25 06:58:06,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9684
          },
          {
            "timestamp": "2026-04-25 06:58:06,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9685
          },
          {
            "timestamp": "2026-04-25 06:58:06,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9686
          },
          {
            "timestamp": "2026-04-25 06:58:06,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9687
          },
          {
            "timestamp": "2026-04-25 06:58:06,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9688
          },
          {
            "timestamp": "2026-04-25 06:58:06,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9689
          },
          {
            "timestamp": "2026-04-25 06:58:06,251",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9690
          },
          {
            "timestamp": "2026-04-25 06:58:06,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9691
          },
          {
            "timestamp": "2026-04-25 06:58:06,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9692
          },
          {
            "timestamp": "2026-04-25 06:58:06,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9693
          },
          {
            "timestamp": "2026-04-25 06:58:06,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9694
          },
          {
            "timestamp": "2026-04-25 06:58:06,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9695
          },
          {
            "timestamp": "2026-04-25 06:58:06,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9696
          },
          {
            "timestamp": "2026-04-25 06:58:06,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9697
          },
          {
            "timestamp": "2026-04-25 06:58:06,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9698
          },
          {
            "timestamp": "2026-04-25 06:58:06,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9699
          },
          {
            "timestamp": "2026-04-25 06:58:06,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9700
          },
          {
            "timestamp": "2026-04-25 06:58:06,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9701
          },
          {
            "timestamp": "2026-04-25 06:58:06,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9702
          },
          {
            "timestamp": "2026-04-25 06:58:06,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9703
          },
          {
            "timestamp": "2026-04-25 06:58:06,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9704
          },
          {
            "timestamp": "2026-04-25 06:58:06,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9705
          },
          {
            "timestamp": "2026-04-25 06:58:06,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9706
          },
          {
            "timestamp": "2026-04-25 06:58:06,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9707
          },
          {
            "timestamp": "2026-04-25 06:58:06,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9708
          },
          {
            "timestamp": "2026-04-25 06:58:06,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9709
          },
          {
            "timestamp": "2026-04-25 06:58:06,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9710
          },
          {
            "timestamp": "2026-04-25 06:58:06,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9711
          },
          {
            "timestamp": "2026-04-25 06:58:06,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9712
          },
          {
            "timestamp": "2026-04-25 06:58:06,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9713
          },
          {
            "timestamp": "2026-04-25 06:58:06,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9714
          },
          {
            "timestamp": "2026-04-25 06:58:06,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9715
          },
          {
            "timestamp": "2026-04-25 06:58:06,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9716
          },
          {
            "timestamp": "2026-04-25 06:58:06,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9717
          },
          {
            "timestamp": "2026-04-25 06:58:06,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9718
          },
          {
            "timestamp": "2026-04-25 06:58:06,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9719
          },
          {
            "timestamp": "2026-04-25 06:58:06,532",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9720
          },
          {
            "timestamp": "2026-04-25 06:58:06,532",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9721
          },
          {
            "timestamp": "2026-04-25 06:58:06,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9722
          },
          {
            "timestamp": "2026-04-25 06:58:06,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9723
          },
          {
            "timestamp": "2026-04-25 06:58:06,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9724
          },
          {
            "timestamp": "2026-04-25 06:58:06,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9725
          },
          {
            "timestamp": "2026-04-25 06:58:06,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9726
          },
          {
            "timestamp": "2026-04-25 06:58:06,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9727
          },
          {
            "timestamp": "2026-04-25 06:58:06,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9728
          },
          {
            "timestamp": "2026-04-25 06:58:06,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9729
          },
          {
            "timestamp": "2026-04-25 06:58:06,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9730
          },
          {
            "timestamp": "2026-04-25 06:58:06,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9731
          },
          {
            "timestamp": "2026-04-25 06:58:06,688",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9732
          },
          {
            "timestamp": "2026-04-25 06:58:06,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9733
          },
          {
            "timestamp": "2026-04-25 06:58:06,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9734
          },
          {
            "timestamp": "2026-04-25 06:58:06,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9735
          },
          {
            "timestamp": "2026-04-25 06:58:06,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9736
          },
          {
            "timestamp": "2026-04-25 06:58:06,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9737
          },
          {
            "timestamp": "2026-04-25 06:58:06,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9738
          },
          {
            "timestamp": "2026-04-25 06:58:06,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9739
          },
          {
            "timestamp": "2026-04-25 06:58:06,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9740
          },
          {
            "timestamp": "2026-04-25 06:58:06,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9741
          },
          {
            "timestamp": "2026-04-25 06:58:06,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9742
          },
          {
            "timestamp": "2026-04-25 06:58:06,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9743
          },
          {
            "timestamp": "2026-04-25 06:58:06,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9744
          },
          {
            "timestamp": "2026-04-25 06:58:06,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9745
          },
          {
            "timestamp": "2026-04-25 06:58:06,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9746
          },
          {
            "timestamp": "2026-04-25 06:58:06,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9747
          },
          {
            "timestamp": "2026-04-25 06:58:06,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9748
          },
          {
            "timestamp": "2026-04-25 06:58:06,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9749
          },
          {
            "timestamp": "2026-04-25 06:58:06,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9750
          },
          {
            "timestamp": "2026-04-25 06:58:06,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9751
          },
          {
            "timestamp": "2026-04-25 06:58:06,938",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9752
          },
          {
            "timestamp": "2026-04-25 06:58:06,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9753
          },
          {
            "timestamp": "2026-04-25 06:58:06,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9754
          },
          {
            "timestamp": "2026-04-25 06:58:06,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9755
          },
          {
            "timestamp": "2026-04-25 06:58:06,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9756
          },
          {
            "timestamp": "2026-04-25 06:58:07,001",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9757
          },
          {
            "timestamp": "2026-04-25 06:58:07,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9758
          },
          {
            "timestamp": "2026-04-25 06:58:07,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9759
          },
          {
            "timestamp": "2026-04-25 06:58:07,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9760
          },
          {
            "timestamp": "2026-04-25 06:58:07,047",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9761
          },
          {
            "timestamp": "2026-04-25 06:58:07,047",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9762
          },
          {
            "timestamp": "2026-04-25 06:58:07,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9763
          },
          {
            "timestamp": "2026-04-25 06:58:07,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9764
          },
          {
            "timestamp": "2026-04-25 06:58:07,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9765
          },
          {
            "timestamp": "2026-04-25 06:58:07,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9766
          },
          {
            "timestamp": "2026-04-25 06:58:07,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9767
          },
          {
            "timestamp": "2026-04-25 06:58:07,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9768
          },
          {
            "timestamp": "2026-04-25 06:58:07,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9769
          },
          {
            "timestamp": "2026-04-25 06:58:07,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9770
          },
          {
            "timestamp": "2026-04-25 06:58:07,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9771
          },
          {
            "timestamp": "2026-04-25 06:58:07,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9772
          },
          {
            "timestamp": "2026-04-25 06:58:07,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9773
          },
          {
            "timestamp": "2026-04-25 06:58:07,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9774
          },
          {
            "timestamp": "2026-04-25 06:58:07,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9775
          },
          {
            "timestamp": "2026-04-25 06:58:07,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9776
          },
          {
            "timestamp": "2026-04-25 06:58:07,251",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9777
          },
          {
            "timestamp": "2026-04-25 06:58:07,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9778
          },
          {
            "timestamp": "2026-04-25 06:58:07,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9779
          },
          {
            "timestamp": "2026-04-25 06:58:07,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9780
          },
          {
            "timestamp": "2026-04-25 06:58:07,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9781
          },
          {
            "timestamp": "2026-04-25 06:58:07,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9782
          },
          {
            "timestamp": "2026-04-25 06:58:07,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9783
          },
          {
            "timestamp": "2026-04-25 06:58:07,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9784
          },
          {
            "timestamp": "2026-04-25 06:58:07,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9785
          },
          {
            "timestamp": "2026-04-25 06:58:07,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9786
          },
          {
            "timestamp": "2026-04-25 06:58:07,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9787
          },
          {
            "timestamp": "2026-04-25 06:58:07,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9788
          },
          {
            "timestamp": "2026-04-25 06:58:07,376",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9789
          },
          {
            "timestamp": "2026-04-25 06:58:07,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9790
          },
          {
            "timestamp": "2026-04-25 06:58:07,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9791
          },
          {
            "timestamp": "2026-04-25 06:58:07,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9792
          },
          {
            "timestamp": "2026-04-25 06:58:07,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9793
          },
          {
            "timestamp": "2026-04-25 06:58:07,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9794
          },
          {
            "timestamp": "2026-04-25 06:58:07,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9795
          },
          {
            "timestamp": "2026-04-25 06:58:07,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9796
          },
          {
            "timestamp": "2026-04-25 06:58:07,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9797
          },
          {
            "timestamp": "2026-04-25 06:58:07,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9798
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 9799
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 9800
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9801
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000524",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1316"
              }
            ],
            "repeated": 0,
            "id": 9802
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1316"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 9803
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1316"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 9804
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000524"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 9805
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1316"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 9806
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 9807
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9808
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9809
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9810
          },
          {
            "timestamp": "2026-04-25 06:58:07,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9811
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9812
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9813
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9814
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9815
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9816
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1316"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 9817
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 9818
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 9819
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 9820
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 9821
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 9822
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1316"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 9823
          },
          {
            "timestamp": "2026-04-25 06:58:07,501",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1316"
              }
            ],
            "repeated": 0,
            "id": 9824
          },
          {
            "timestamp": "2026-04-25 06:58:07,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9825
          },
          {
            "timestamp": "2026-04-25 06:58:07,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9826
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 9827
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1316"
              }
            ],
            "repeated": 0,
            "id": 9828
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 9829
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 9830
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9831
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9832
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 9833
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 9834
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9835
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9836
          },
          {
            "timestamp": "2026-04-25 06:58:07,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9837
          },
          {
            "timestamp": "2026-04-25 06:58:07,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9838
          },
          {
            "timestamp": "2026-04-25 06:58:07,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9839
          },
          {
            "timestamp": "2026-04-25 06:58:07,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9840
          },
          {
            "timestamp": "2026-04-25 06:58:07,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9841
          },
          {
            "timestamp": "2026-04-25 06:58:07,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9842
          },
          {
            "timestamp": "2026-04-25 06:58:07,563",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9843
          },
          {
            "timestamp": "2026-04-25 06:58:07,563",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9844
          },
          {
            "timestamp": "2026-04-25 06:58:07,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9845
          },
          {
            "timestamp": "2026-04-25 06:58:07,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9846
          },
          {
            "timestamp": "2026-04-25 06:58:07,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9847
          },
          {
            "timestamp": "2026-04-25 06:58:07,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9848
          },
          {
            "timestamp": "2026-04-25 06:58:07,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9849
          },
          {
            "timestamp": "2026-04-25 06:58:07,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9850
          },
          {
            "timestamp": "2026-04-25 06:58:07,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9851
          },
          {
            "timestamp": "2026-04-25 06:58:07,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9852
          },
          {
            "timestamp": "2026-04-25 06:58:07,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9853
          },
          {
            "timestamp": "2026-04-25 06:58:07,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9854
          },
          {
            "timestamp": "2026-04-25 06:58:07,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9855
          },
          {
            "timestamp": "2026-04-25 06:58:07,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9856
          },
          {
            "timestamp": "2026-04-25 06:58:07,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9857
          },
          {
            "timestamp": "2026-04-25 06:58:07,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9858
          },
          {
            "timestamp": "2026-04-25 06:58:07,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9859
          },
          {
            "timestamp": "2026-04-25 06:58:07,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9860
          },
          {
            "timestamp": "2026-04-25 06:58:07,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9861
          },
          {
            "timestamp": "2026-04-25 06:58:07,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9862
          },
          {
            "timestamp": "2026-04-25 06:58:07,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9863
          },
          {
            "timestamp": "2026-04-25 06:58:07,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9864
          },
          {
            "timestamp": "2026-04-25 06:58:07,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9865
          },
          {
            "timestamp": "2026-04-25 06:58:07,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9866
          },
          {
            "timestamp": "2026-04-25 06:58:07,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9867
          },
          {
            "timestamp": "2026-04-25 06:58:07,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9868
          },
          {
            "timestamp": "2026-04-25 06:58:07,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9869
          },
          {
            "timestamp": "2026-04-25 06:58:07,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9870
          },
          {
            "timestamp": "2026-04-25 06:58:07,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9871
          },
          {
            "timestamp": "2026-04-25 06:58:07,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9872
          },
          {
            "timestamp": "2026-04-25 06:58:07,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9873
          },
          {
            "timestamp": "2026-04-25 06:58:07,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9874
          },
          {
            "timestamp": "2026-04-25 06:58:07,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9875
          },
          {
            "timestamp": "2026-04-25 06:58:07,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9876
          },
          {
            "timestamp": "2026-04-25 06:58:08,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9877
          },
          {
            "timestamp": "2026-04-25 06:58:08,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9878
          },
          {
            "timestamp": "2026-04-25 06:58:08,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9879
          },
          {
            "timestamp": "2026-04-25 06:58:08,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9880
          },
          {
            "timestamp": "2026-04-25 06:58:08,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9881
          },
          {
            "timestamp": "2026-04-25 06:58:08,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9882
          },
          {
            "timestamp": "2026-04-25 06:58:08,079",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9883
          },
          {
            "timestamp": "2026-04-25 06:58:08,079",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9884
          },
          {
            "timestamp": "2026-04-25 06:58:08,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9885
          },
          {
            "timestamp": "2026-04-25 06:58:08,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9886
          },
          {
            "timestamp": "2026-04-25 06:58:08,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9887
          },
          {
            "timestamp": "2026-04-25 06:58:08,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9888
          },
          {
            "timestamp": "2026-04-25 06:58:08,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9889
          },
          {
            "timestamp": "2026-04-25 06:58:08,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9890
          },
          {
            "timestamp": "2026-04-25 06:58:08,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9891
          },
          {
            "timestamp": "2026-04-25 06:58:08,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9892
          },
          {
            "timestamp": "2026-04-25 06:58:08,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9893
          },
          {
            "timestamp": "2026-04-25 06:58:08,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9894
          },
          {
            "timestamp": "2026-04-25 06:58:08,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9895
          },
          {
            "timestamp": "2026-04-25 06:58:08,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9896
          },
          {
            "timestamp": "2026-04-25 06:58:08,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9897
          },
          {
            "timestamp": "2026-04-25 06:58:08,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9898
          },
          {
            "timestamp": "2026-04-25 06:58:08,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "32"
              }
            ],
            "repeated": 0,
            "id": 9899
          },
          {
            "timestamp": "2026-04-25 06:58:08,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9900
          },
          {
            "timestamp": "2026-04-25 06:58:08,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9901
          },
          {
            "timestamp": "2026-04-25 06:58:08,266",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9902
          },
          {
            "timestamp": "2026-04-25 06:58:08,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 9903
          },
          {
            "timestamp": "2026-04-25 06:58:08,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9904
          },
          {
            "timestamp": "2026-04-25 06:58:08,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9905
          },
          {
            "timestamp": "2026-04-25 06:58:08,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9906
          },
          {
            "timestamp": "2026-04-25 06:58:08,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9907
          },
          {
            "timestamp": "2026-04-25 06:58:08,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9908
          },
          {
            "timestamp": "2026-04-25 06:58:08,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9909
          },
          {
            "timestamp": "2026-04-25 06:58:08,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9910
          },
          {
            "timestamp": "2026-04-25 06:58:08,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9911
          },
          {
            "timestamp": "2026-04-25 06:58:08,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9912
          },
          {
            "timestamp": "2026-04-25 06:58:08,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9913
          },
          {
            "timestamp": "2026-04-25 06:58:08,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9914
          },
          {
            "timestamp": "2026-04-25 06:58:08,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9915
          },
          {
            "timestamp": "2026-04-25 06:58:08,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9916
          },
          {
            "timestamp": "2026-04-25 06:58:08,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9917
          },
          {
            "timestamp": "2026-04-25 06:58:08,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9918
          },
          {
            "timestamp": "2026-04-25 06:58:08,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9919
          },
          {
            "timestamp": "2026-04-25 06:58:08,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9920
          },
          {
            "timestamp": "2026-04-25 06:58:08,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9921
          },
          {
            "timestamp": "2026-04-25 06:58:08,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9922
          },
          {
            "timestamp": "2026-04-25 06:58:08,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9923
          },
          {
            "timestamp": "2026-04-25 06:58:08,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9924
          },
          {
            "timestamp": "2026-04-25 06:58:08,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9925
          },
          {
            "timestamp": "2026-04-25 06:58:08,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9926
          },
          {
            "timestamp": "2026-04-25 06:58:08,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9927
          },
          {
            "timestamp": "2026-04-25 06:58:08,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9928
          },
          {
            "timestamp": "2026-04-25 06:58:08,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9929
          },
          {
            "timestamp": "2026-04-25 06:58:08,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9930
          },
          {
            "timestamp": "2026-04-25 06:58:08,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9931
          },
          {
            "timestamp": "2026-04-25 06:58:08,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9932
          },
          {
            "timestamp": "2026-04-25 06:58:08,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9933
          },
          {
            "timestamp": "2026-04-25 06:58:08,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9934
          },
          {
            "timestamp": "2026-04-25 06:58:08,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9935
          },
          {
            "timestamp": "2026-04-25 06:58:08,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9936
          },
          {
            "timestamp": "2026-04-25 06:58:08,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9937
          },
          {
            "timestamp": "2026-04-25 06:58:08,594",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9938
          },
          {
            "timestamp": "2026-04-25 06:58:08,594",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9939
          },
          {
            "timestamp": "2026-04-25 06:58:08,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9940
          },
          {
            "timestamp": "2026-04-25 06:58:08,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9941
          },
          {
            "timestamp": "2026-04-25 06:58:08,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9942
          },
          {
            "timestamp": "2026-04-25 06:58:08,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9943
          },
          {
            "timestamp": "2026-04-25 06:58:08,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9944
          },
          {
            "timestamp": "2026-04-25 06:58:08,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9945
          },
          {
            "timestamp": "2026-04-25 06:58:08,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9946
          },
          {
            "timestamp": "2026-04-25 06:58:08,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9947
          },
          {
            "timestamp": "2026-04-25 06:58:08,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9948
          },
          {
            "timestamp": "2026-04-25 06:58:08,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9949
          },
          {
            "timestamp": "2026-04-25 06:58:08,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9950
          },
          {
            "timestamp": "2026-04-25 06:58:08,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9951
          },
          {
            "timestamp": "2026-04-25 06:58:08,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9952
          },
          {
            "timestamp": "2026-04-25 06:58:08,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9953
          },
          {
            "timestamp": "2026-04-25 06:58:08,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9954
          },
          {
            "timestamp": "2026-04-25 06:58:08,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9955
          },
          {
            "timestamp": "2026-04-25 06:58:08,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9956
          },
          {
            "timestamp": "2026-04-25 06:58:08,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9957
          },
          {
            "timestamp": "2026-04-25 06:58:08,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9958
          },
          {
            "timestamp": "2026-04-25 06:58:08,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9959
          },
          {
            "timestamp": "2026-04-25 06:58:08,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9960
          },
          {
            "timestamp": "2026-04-25 06:58:08,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9961
          },
          {
            "timestamp": "2026-04-25 06:58:08,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9962
          },
          {
            "timestamp": "2026-04-25 06:58:08,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9963
          },
          {
            "timestamp": "2026-04-25 06:58:08,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9964
          },
          {
            "timestamp": "2026-04-25 06:58:08,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9965
          },
          {
            "timestamp": "2026-04-25 06:58:08,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9966
          },
          {
            "timestamp": "2026-04-25 06:58:08,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9967
          },
          {
            "timestamp": "2026-04-25 06:58:08,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9968
          },
          {
            "timestamp": "2026-04-25 06:58:08,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9969
          },
          {
            "timestamp": "2026-04-25 06:58:08,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9970
          },
          {
            "timestamp": "2026-04-25 06:58:08,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9971
          },
          {
            "timestamp": "2026-04-25 06:58:08,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9972
          },
          {
            "timestamp": "2026-04-25 06:58:09,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9973
          },
          {
            "timestamp": "2026-04-25 06:58:09,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9974
          },
          {
            "timestamp": "2026-04-25 06:58:09,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9975
          },
          {
            "timestamp": "2026-04-25 06:58:09,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9976
          },
          {
            "timestamp": "2026-04-25 06:58:09,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9977
          },
          {
            "timestamp": "2026-04-25 06:58:09,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9978
          },
          {
            "timestamp": "2026-04-25 06:58:09,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9979
          },
          {
            "timestamp": "2026-04-25 06:58:09,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9980
          },
          {
            "timestamp": "2026-04-25 06:58:09,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9981
          },
          {
            "timestamp": "2026-04-25 06:58:09,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9982
          },
          {
            "timestamp": "2026-04-25 06:58:09,110",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 9983
          },
          {
            "timestamp": "2026-04-25 06:58:09,110",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 9984
          },
          {
            "timestamp": "2026-04-25 06:58:09,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 9985
          },
          {
            "timestamp": "2026-04-25 06:58:09,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9986
          },
          {
            "timestamp": "2026-04-25 06:58:09,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 9987
          },
          {
            "timestamp": "2026-04-25 06:58:09,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9988
          },
          {
            "timestamp": "2026-04-25 06:58:09,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9989
          },
          {
            "timestamp": "2026-04-25 06:58:09,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9990
          },
          {
            "timestamp": "2026-04-25 06:58:09,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9991
          },
          {
            "timestamp": "2026-04-25 06:58:09,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9992
          },
          {
            "timestamp": "2026-04-25 06:58:09,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 9993
          },
          {
            "timestamp": "2026-04-25 06:58:09,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9994
          },
          {
            "timestamp": "2026-04-25 06:58:09,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9995
          },
          {
            "timestamp": "2026-04-25 06:58:09,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 9996
          },
          {
            "timestamp": "2026-04-25 06:58:09,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9997
          },
          {
            "timestamp": "2026-04-25 06:58:09,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 9998
          },
          {
            "timestamp": "2026-04-25 06:58:09,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 9999
          },
          {
            "timestamp": "2026-04-25 06:58:09,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10000
          },
          {
            "timestamp": "2026-04-25 06:58:09,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10001
          },
          {
            "timestamp": "2026-04-25 06:58:09,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10002
          },
          {
            "timestamp": "2026-04-25 06:58:09,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10003
          },
          {
            "timestamp": "2026-04-25 06:58:09,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10004
          },
          {
            "timestamp": "2026-04-25 06:58:09,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10005
          },
          {
            "timestamp": "2026-04-25 06:58:09,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10006
          },
          {
            "timestamp": "2026-04-25 06:58:09,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10007
          },
          {
            "timestamp": "2026-04-25 06:58:09,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10008
          },
          {
            "timestamp": "2026-04-25 06:58:09,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10009
          },
          {
            "timestamp": "2026-04-25 06:58:09,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10010
          },
          {
            "timestamp": "2026-04-25 06:58:09,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10011
          },
          {
            "timestamp": "2026-04-25 06:58:09,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10012
          },
          {
            "timestamp": "2026-04-25 06:58:09,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10013
          },
          {
            "timestamp": "2026-04-25 06:58:09,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10014
          },
          {
            "timestamp": "2026-04-25 06:58:09,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10015
          },
          {
            "timestamp": "2026-04-25 06:58:09,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10016
          },
          {
            "timestamp": "2026-04-25 06:58:09,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10017
          },
          {
            "timestamp": "2026-04-25 06:58:09,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10018
          },
          {
            "timestamp": "2026-04-25 06:58:09,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10019
          },
          {
            "timestamp": "2026-04-25 06:58:09,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10020
          },
          {
            "timestamp": "2026-04-25 06:58:09,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10021
          },
          {
            "timestamp": "2026-04-25 06:58:09,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10022
          },
          {
            "timestamp": "2026-04-25 06:58:09,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10023
          },
          {
            "timestamp": "2026-04-25 06:58:09,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10024
          },
          {
            "timestamp": "2026-04-25 06:58:09,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10025
          },
          {
            "timestamp": "2026-04-25 06:58:09,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10026
          },
          {
            "timestamp": "2026-04-25 06:58:09,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10027
          },
          {
            "timestamp": "2026-04-25 06:58:09,626",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10028
          },
          {
            "timestamp": "2026-04-25 06:58:09,626",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10029
          },
          {
            "timestamp": "2026-04-25 06:58:09,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10030
          },
          {
            "timestamp": "2026-04-25 06:58:09,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10031
          },
          {
            "timestamp": "2026-04-25 06:58:09,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10032
          },
          {
            "timestamp": "2026-04-25 06:58:09,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10033
          },
          {
            "timestamp": "2026-04-25 06:58:09,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10034
          },
          {
            "timestamp": "2026-04-25 06:58:09,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10035
          },
          {
            "timestamp": "2026-04-25 06:58:09,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10036
          },
          {
            "timestamp": "2026-04-25 06:58:09,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10037
          },
          {
            "timestamp": "2026-04-25 06:58:09,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10038
          },
          {
            "timestamp": "2026-04-25 06:58:09,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10039
          },
          {
            "timestamp": "2026-04-25 06:58:09,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10040
          },
          {
            "timestamp": "2026-04-25 06:58:09,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10041
          },
          {
            "timestamp": "2026-04-25 06:58:09,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10042
          },
          {
            "timestamp": "2026-04-25 06:58:09,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10043
          },
          {
            "timestamp": "2026-04-25 06:58:09,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10044
          },
          {
            "timestamp": "2026-04-25 06:58:09,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10045
          },
          {
            "timestamp": "2026-04-25 06:58:09,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10046
          },
          {
            "timestamp": "2026-04-25 06:58:09,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10047
          },
          {
            "timestamp": "2026-04-25 06:58:09,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10048
          },
          {
            "timestamp": "2026-04-25 06:58:09,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10049
          },
          {
            "timestamp": "2026-04-25 06:58:09,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10050
          },
          {
            "timestamp": "2026-04-25 06:58:09,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10051
          },
          {
            "timestamp": "2026-04-25 06:58:09,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10052
          },
          {
            "timestamp": "2026-04-25 06:58:09,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10053
          },
          {
            "timestamp": "2026-04-25 06:58:09,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10054
          },
          {
            "timestamp": "2026-04-25 06:58:09,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10055
          },
          {
            "timestamp": "2026-04-25 06:58:09,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10056
          },
          {
            "timestamp": "2026-04-25 06:58:09,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10057
          },
          {
            "timestamp": "2026-04-25 06:58:09,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10058
          },
          {
            "timestamp": "2026-04-25 06:58:09,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10059
          },
          {
            "timestamp": "2026-04-25 06:58:10,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10060
          },
          {
            "timestamp": "2026-04-25 06:58:10,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10061
          },
          {
            "timestamp": "2026-04-25 06:58:10,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10062
          },
          {
            "timestamp": "2026-04-25 06:58:10,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10063
          },
          {
            "timestamp": "2026-04-25 06:58:10,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10064
          },
          {
            "timestamp": "2026-04-25 06:58:10,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10065
          },
          {
            "timestamp": "2026-04-25 06:58:10,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10066
          },
          {
            "timestamp": "2026-04-25 06:58:10,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10067
          },
          {
            "timestamp": "2026-04-25 06:58:10,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10068
          },
          {
            "timestamp": "2026-04-25 06:58:10,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10069
          },
          {
            "timestamp": "2026-04-25 06:58:10,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10070
          },
          {
            "timestamp": "2026-04-25 06:58:10,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10071
          },
          {
            "timestamp": "2026-04-25 06:58:10,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10072
          },
          {
            "timestamp": "2026-04-25 06:58:10,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10073
          },
          {
            "timestamp": "2026-04-25 06:58:10,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10074
          },
          {
            "timestamp": "2026-04-25 06:58:10,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10075
          },
          {
            "timestamp": "2026-04-25 06:58:10,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10076
          },
          {
            "timestamp": "2026-04-25 06:58:10,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10077
          },
          {
            "timestamp": "2026-04-25 06:58:10,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10078
          },
          {
            "timestamp": "2026-04-25 06:58:10,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10079
          },
          {
            "timestamp": "2026-04-25 06:58:10,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10080
          },
          {
            "timestamp": "2026-04-25 06:58:10,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10081
          },
          {
            "timestamp": "2026-04-25 06:58:10,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10082
          },
          {
            "timestamp": "2026-04-25 06:58:10,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10083
          },
          {
            "timestamp": "2026-04-25 06:58:10,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10084
          },
          {
            "timestamp": "2026-04-25 06:58:10,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10085
          },
          {
            "timestamp": "2026-04-25 06:58:10,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10086
          },
          {
            "timestamp": "2026-04-25 06:58:10,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10087
          },
          {
            "timestamp": "2026-04-25 06:58:10,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10088
          },
          {
            "timestamp": "2026-04-25 06:58:10,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10089
          },
          {
            "timestamp": "2026-04-25 06:58:10,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10090
          },
          {
            "timestamp": "2026-04-25 06:58:10,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10091
          },
          {
            "timestamp": "2026-04-25 06:58:10,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10092
          },
          {
            "timestamp": "2026-04-25 06:58:10,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10093
          },
          {
            "timestamp": "2026-04-25 06:58:10,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10094
          },
          {
            "timestamp": "2026-04-25 06:58:10,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10095
          },
          {
            "timestamp": "2026-04-25 06:58:10,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10096
          },
          {
            "timestamp": "2026-04-25 06:58:10,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10097
          },
          {
            "timestamp": "2026-04-25 06:58:10,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10098
          },
          {
            "timestamp": "2026-04-25 06:58:10,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10099
          },
          {
            "timestamp": "2026-04-25 06:58:10,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10100
          },
          {
            "timestamp": "2026-04-25 06:58:10,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10101
          },
          {
            "timestamp": "2026-04-25 06:58:10,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10102
          },
          {
            "timestamp": "2026-04-25 06:58:10,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10103
          },
          {
            "timestamp": "2026-04-25 06:58:10,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10104
          },
          {
            "timestamp": "2026-04-25 06:58:10,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10105
          },
          {
            "timestamp": "2026-04-25 06:58:10,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10106
          },
          {
            "timestamp": "2026-04-25 06:58:10,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10107
          },
          {
            "timestamp": "2026-04-25 06:58:10,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10108
          },
          {
            "timestamp": "2026-04-25 06:58:10,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10109
          },
          {
            "timestamp": "2026-04-25 06:58:10,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10110
          },
          {
            "timestamp": "2026-04-25 06:58:10,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10111
          },
          {
            "timestamp": "2026-04-25 06:58:10,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10112
          },
          {
            "timestamp": "2026-04-25 06:58:10,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10113
          },
          {
            "timestamp": "2026-04-25 06:58:10,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10114
          },
          {
            "timestamp": "2026-04-25 06:58:10,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10115
          },
          {
            "timestamp": "2026-04-25 06:58:10,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10116
          },
          {
            "timestamp": "2026-04-25 06:58:10,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10117
          },
          {
            "timestamp": "2026-04-25 06:58:10,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10118
          },
          {
            "timestamp": "2026-04-25 06:58:10,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10119
          },
          {
            "timestamp": "2026-04-25 06:58:10,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10120
          },
          {
            "timestamp": "2026-04-25 06:58:10,657",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10121
          },
          {
            "timestamp": "2026-04-25 06:58:10,657",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10122
          },
          {
            "timestamp": "2026-04-25 06:58:10,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10123
          },
          {
            "timestamp": "2026-04-25 06:58:10,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10124
          },
          {
            "timestamp": "2026-04-25 06:58:10,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10125
          },
          {
            "timestamp": "2026-04-25 06:58:10,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10126
          },
          {
            "timestamp": "2026-04-25 06:58:10,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10127
          },
          {
            "timestamp": "2026-04-25 06:58:10,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10128
          },
          {
            "timestamp": "2026-04-25 06:58:10,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10129
          },
          {
            "timestamp": "2026-04-25 06:58:10,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10130
          },
          {
            "timestamp": "2026-04-25 06:58:10,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10131
          },
          {
            "timestamp": "2026-04-25 06:58:10,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10132
          },
          {
            "timestamp": "2026-04-25 06:58:10,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10133
          },
          {
            "timestamp": "2026-04-25 06:58:10,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10134
          },
          {
            "timestamp": "2026-04-25 06:58:10,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10135
          },
          {
            "timestamp": "2026-04-25 06:58:10,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10136
          },
          {
            "timestamp": "2026-04-25 06:58:10,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10137
          },
          {
            "timestamp": "2026-04-25 06:58:10,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10138
          },
          {
            "timestamp": "2026-04-25 06:58:10,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10139
          },
          {
            "timestamp": "2026-04-25 06:58:10,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10140
          },
          {
            "timestamp": "2026-04-25 06:58:10,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10141
          },
          {
            "timestamp": "2026-04-25 06:58:10,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10142
          },
          {
            "timestamp": "2026-04-25 06:58:10,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10143
          },
          {
            "timestamp": "2026-04-25 06:58:10,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10144
          },
          {
            "timestamp": "2026-04-25 06:58:10,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10145
          },
          {
            "timestamp": "2026-04-25 06:58:10,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10146
          },
          {
            "timestamp": "2026-04-25 06:58:10,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10147
          },
          {
            "timestamp": "2026-04-25 06:58:11,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10148
          },
          {
            "timestamp": "2026-04-25 06:58:11,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10149
          },
          {
            "timestamp": "2026-04-25 06:58:11,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10150
          },
          {
            "timestamp": "2026-04-25 06:58:11,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10151
          },
          {
            "timestamp": "2026-04-25 06:58:11,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10152
          },
          {
            "timestamp": "2026-04-25 06:58:11,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10153
          },
          {
            "timestamp": "2026-04-25 06:58:11,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10154
          },
          {
            "timestamp": "2026-04-25 06:58:11,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10155
          },
          {
            "timestamp": "2026-04-25 06:58:11,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10156
          },
          {
            "timestamp": "2026-04-25 06:58:11,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10157
          },
          {
            "timestamp": "2026-04-25 06:58:11,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10158
          },
          {
            "timestamp": "2026-04-25 06:58:11,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10159
          },
          {
            "timestamp": "2026-04-25 06:58:11,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10160
          },
          {
            "timestamp": "2026-04-25 06:58:11,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10161
          },
          {
            "timestamp": "2026-04-25 06:58:11,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10162
          },
          {
            "timestamp": "2026-04-25 06:58:11,172",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10163
          },
          {
            "timestamp": "2026-04-25 06:58:11,172",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10164
          },
          {
            "timestamp": "2026-04-25 06:58:11,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10165
          },
          {
            "timestamp": "2026-04-25 06:58:11,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10166
          },
          {
            "timestamp": "2026-04-25 06:58:11,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10167
          },
          {
            "timestamp": "2026-04-25 06:58:11,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10168
          },
          {
            "timestamp": "2026-04-25 06:58:11,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10169
          },
          {
            "timestamp": "2026-04-25 06:58:11,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10170
          },
          {
            "timestamp": "2026-04-25 06:58:11,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10171
          },
          {
            "timestamp": "2026-04-25 06:58:11,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10172
          },
          {
            "timestamp": "2026-04-25 06:58:11,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10173
          },
          {
            "timestamp": "2026-04-25 06:58:11,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10174
          },
          {
            "timestamp": "2026-04-25 06:58:11,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10175
          },
          {
            "timestamp": "2026-04-25 06:58:11,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10176
          },
          {
            "timestamp": "2026-04-25 06:58:11,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10177
          },
          {
            "timestamp": "2026-04-25 06:58:11,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10178
          },
          {
            "timestamp": "2026-04-25 06:58:11,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10179
          },
          {
            "timestamp": "2026-04-25 06:58:11,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10180
          },
          {
            "timestamp": "2026-04-25 06:58:11,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10181
          },
          {
            "timestamp": "2026-04-25 06:58:11,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10182
          },
          {
            "timestamp": "2026-04-25 06:58:11,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10183
          },
          {
            "timestamp": "2026-04-25 06:58:11,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10184
          },
          {
            "timestamp": "2026-04-25 06:58:11,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10185
          },
          {
            "timestamp": "2026-04-25 06:58:11,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10186
          },
          {
            "timestamp": "2026-04-25 06:58:11,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10187
          },
          {
            "timestamp": "2026-04-25 06:58:11,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10188
          },
          {
            "timestamp": "2026-04-25 06:58:11,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10189
          },
          {
            "timestamp": "2026-04-25 06:58:11,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10190
          },
          {
            "timestamp": "2026-04-25 06:58:11,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10191
          },
          {
            "timestamp": "2026-04-25 06:58:11,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10192
          },
          {
            "timestamp": "2026-04-25 06:58:11,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10193
          },
          {
            "timestamp": "2026-04-25 06:58:11,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10194
          },
          {
            "timestamp": "2026-04-25 06:58:11,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10195
          },
          {
            "timestamp": "2026-04-25 06:58:11,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10196
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 10197
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 10198
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10199
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000528",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1320"
              }
            ],
            "repeated": 0,
            "id": 10200
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1320"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 10201
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1320"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 10202
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000528"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 10203
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1320"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 10204
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 10205
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10206
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10207
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10208
          },
          {
            "timestamp": "2026-04-25 06:58:11,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10209
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1320"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 10210
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 10211
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 10212
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 10213
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 10214
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 10215
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1320"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 10216
          },
          {
            "timestamp": "2026-04-25 06:58:11,563",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1320"
              }
            ],
            "repeated": 0,
            "id": 10217
          },
          {
            "timestamp": "2026-04-25 06:58:11,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10218
          },
          {
            "timestamp": "2026-04-25 06:58:11,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10219
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10220
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10221
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10222
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10223
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10224
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10225
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10226
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10227
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 10228
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "800",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1320"
              }
            ],
            "repeated": 0,
            "id": 10229
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "800",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 10230
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "800",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 10231
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10232
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10233
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 10234
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 10235
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10236
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10237
          },
          {
            "timestamp": "2026-04-25 06:58:11,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10238
          },
          {
            "timestamp": "2026-04-25 06:58:11,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10239
          },
          {
            "timestamp": "2026-04-25 06:58:11,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10240
          },
          {
            "timestamp": "2026-04-25 06:58:11,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10241
          },
          {
            "timestamp": "2026-04-25 06:58:11,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10242
          },
          {
            "timestamp": "2026-04-25 06:58:11,688",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10243
          },
          {
            "timestamp": "2026-04-25 06:58:11,688",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10244
          },
          {
            "timestamp": "2026-04-25 06:58:11,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10245
          },
          {
            "timestamp": "2026-04-25 06:58:11,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10246
          },
          {
            "timestamp": "2026-04-25 06:58:11,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10247
          },
          {
            "timestamp": "2026-04-25 06:58:11,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10248
          },
          {
            "timestamp": "2026-04-25 06:58:11,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10249
          },
          {
            "timestamp": "2026-04-25 06:58:11,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10250
          },
          {
            "timestamp": "2026-04-25 06:58:11,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10251
          },
          {
            "timestamp": "2026-04-25 06:58:11,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10252
          },
          {
            "timestamp": "2026-04-25 06:58:11,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10253
          },
          {
            "timestamp": "2026-04-25 06:58:11,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10254
          },
          {
            "timestamp": "2026-04-25 06:58:11,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10255
          },
          {
            "timestamp": "2026-04-25 06:58:11,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10256
          },
          {
            "timestamp": "2026-04-25 06:58:11,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10257
          },
          {
            "timestamp": "2026-04-25 06:58:11,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10258
          },
          {
            "timestamp": "2026-04-25 06:58:11,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10259
          },
          {
            "timestamp": "2026-04-25 06:58:11,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10260
          },
          {
            "timestamp": "2026-04-25 06:58:11,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10261
          },
          {
            "timestamp": "2026-04-25 06:58:11,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10262
          },
          {
            "timestamp": "2026-04-25 06:58:11,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10263
          },
          {
            "timestamp": "2026-04-25 06:58:11,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10264
          },
          {
            "timestamp": "2026-04-25 06:58:11,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10265
          },
          {
            "timestamp": "2026-04-25 06:58:11,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10266
          },
          {
            "timestamp": "2026-04-25 06:58:11,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10267
          },
          {
            "timestamp": "2026-04-25 06:58:11,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10268
          },
          {
            "timestamp": "2026-04-25 06:58:11,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10269
          },
          {
            "timestamp": "2026-04-25 06:58:12,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10270
          },
          {
            "timestamp": "2026-04-25 06:58:12,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10271
          },
          {
            "timestamp": "2026-04-25 06:58:12,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10272
          },
          {
            "timestamp": "2026-04-25 06:58:12,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10273
          },
          {
            "timestamp": "2026-04-25 06:58:12,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10274
          },
          {
            "timestamp": "2026-04-25 06:58:12,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10275
          },
          {
            "timestamp": "2026-04-25 06:58:12,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10276
          },
          {
            "timestamp": "2026-04-25 06:58:12,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10277
          },
          {
            "timestamp": "2026-04-25 06:58:12,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10278
          },
          {
            "timestamp": "2026-04-25 06:58:12,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10279
          },
          {
            "timestamp": "2026-04-25 06:58:12,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10280
          },
          {
            "timestamp": "2026-04-25 06:58:12,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10281
          },
          {
            "timestamp": "2026-04-25 06:58:12,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10282
          },
          {
            "timestamp": "2026-04-25 06:58:12,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10283
          },
          {
            "timestamp": "2026-04-25 06:58:12,204",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10284
          },
          {
            "timestamp": "2026-04-25 06:58:12,204",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10285
          },
          {
            "timestamp": "2026-04-25 06:58:12,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10286
          },
          {
            "timestamp": "2026-04-25 06:58:12,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10287
          },
          {
            "timestamp": "2026-04-25 06:58:12,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10288
          },
          {
            "timestamp": "2026-04-25 06:58:12,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10289
          },
          {
            "timestamp": "2026-04-25 06:58:12,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10290
          },
          {
            "timestamp": "2026-04-25 06:58:12,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10291
          },
          {
            "timestamp": "2026-04-25 06:58:12,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10292
          },
          {
            "timestamp": "2026-04-25 06:58:12,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10293
          },
          {
            "timestamp": "2026-04-25 06:58:12,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10294
          },
          {
            "timestamp": "2026-04-25 06:58:12,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10295
          },
          {
            "timestamp": "2026-04-25 06:58:12,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10296
          },
          {
            "timestamp": "2026-04-25 06:58:12,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10297
          },
          {
            "timestamp": "2026-04-25 06:58:12,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10298
          },
          {
            "timestamp": "2026-04-25 06:58:12,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10299
          },
          {
            "timestamp": "2026-04-25 06:58:12,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10300
          },
          {
            "timestamp": "2026-04-25 06:58:12,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10301
          },
          {
            "timestamp": "2026-04-25 06:58:12,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10302
          },
          {
            "timestamp": "2026-04-25 06:58:12,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10303
          },
          {
            "timestamp": "2026-04-25 06:58:12,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10304
          },
          {
            "timestamp": "2026-04-25 06:58:12,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10305
          },
          {
            "timestamp": "2026-04-25 06:58:12,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10306
          },
          {
            "timestamp": "2026-04-25 06:58:12,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10307
          },
          {
            "timestamp": "2026-04-25 06:58:12,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10308
          },
          {
            "timestamp": "2026-04-25 06:58:12,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10309
          },
          {
            "timestamp": "2026-04-25 06:58:12,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10310
          },
          {
            "timestamp": "2026-04-25 06:58:12,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10311
          },
          {
            "timestamp": "2026-04-25 06:58:12,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10312
          },
          {
            "timestamp": "2026-04-25 06:58:12,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10313
          },
          {
            "timestamp": "2026-04-25 06:58:12,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10314
          },
          {
            "timestamp": "2026-04-25 06:58:12,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10315
          },
          {
            "timestamp": "2026-04-25 06:58:12,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10316
          },
          {
            "timestamp": "2026-04-25 06:58:12,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10317
          },
          {
            "timestamp": "2026-04-25 06:58:12,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10318
          },
          {
            "timestamp": "2026-04-25 06:58:12,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10319
          },
          {
            "timestamp": "2026-04-25 06:58:12,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10320
          },
          {
            "timestamp": "2026-04-25 06:58:12,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10321
          },
          {
            "timestamp": "2026-04-25 06:58:12,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10322
          },
          {
            "timestamp": "2026-04-25 06:58:12,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10323
          },
          {
            "timestamp": "2026-04-25 06:58:12,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10324
          },
          {
            "timestamp": "2026-04-25 06:58:12,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10325
          },
          {
            "timestamp": "2026-04-25 06:58:12,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10326
          },
          {
            "timestamp": "2026-04-25 06:58:12,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10327
          },
          {
            "timestamp": "2026-04-25 06:58:12,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10328
          },
          {
            "timestamp": "2026-04-25 06:58:12,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10329
          },
          {
            "timestamp": "2026-04-25 06:58:12,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10330
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10331
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10332
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10333
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10334
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10335
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10336
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10337
          },
          {
            "timestamp": "2026-04-25 06:58:12,719",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10338
          },
          {
            "timestamp": "2026-04-25 06:58:12,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10339
          },
          {
            "timestamp": "2026-04-25 06:58:12,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10340
          },
          {
            "timestamp": "2026-04-25 06:58:12,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10341
          },
          {
            "timestamp": "2026-04-25 06:58:12,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10342
          },
          {
            "timestamp": "2026-04-25 06:58:12,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10343
          },
          {
            "timestamp": "2026-04-25 06:58:12,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10344
          },
          {
            "timestamp": "2026-04-25 06:58:12,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10345
          },
          {
            "timestamp": "2026-04-25 06:58:12,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10346
          },
          {
            "timestamp": "2026-04-25 06:58:12,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10347
          },
          {
            "timestamp": "2026-04-25 06:58:12,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10348
          },
          {
            "timestamp": "2026-04-25 06:58:12,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10349
          },
          {
            "timestamp": "2026-04-25 06:58:12,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10350
          },
          {
            "timestamp": "2026-04-25 06:58:12,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10351
          },
          {
            "timestamp": "2026-04-25 06:58:12,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10352
          },
          {
            "timestamp": "2026-04-25 06:58:12,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10353
          },
          {
            "timestamp": "2026-04-25 06:58:12,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10354
          },
          {
            "timestamp": "2026-04-25 06:58:12,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10355
          },
          {
            "timestamp": "2026-04-25 06:58:12,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10356
          },
          {
            "timestamp": "2026-04-25 06:58:12,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10357
          },
          {
            "timestamp": "2026-04-25 06:58:12,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10358
          },
          {
            "timestamp": "2026-04-25 06:58:12,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10359
          },
          {
            "timestamp": "2026-04-25 06:58:12,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10360
          },
          {
            "timestamp": "2026-04-25 06:58:12,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10361
          },
          {
            "timestamp": "2026-04-25 06:58:13,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10362
          },
          {
            "timestamp": "2026-04-25 06:58:13,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10363
          },
          {
            "timestamp": "2026-04-25 06:58:13,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10364
          },
          {
            "timestamp": "2026-04-25 06:58:13,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10365
          },
          {
            "timestamp": "2026-04-25 06:58:13,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10366
          },
          {
            "timestamp": "2026-04-25 06:58:13,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10367
          },
          {
            "timestamp": "2026-04-25 06:58:13,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10368
          },
          {
            "timestamp": "2026-04-25 06:58:13,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10369
          },
          {
            "timestamp": "2026-04-25 06:58:13,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10370
          },
          {
            "timestamp": "2026-04-25 06:58:13,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10371
          },
          {
            "timestamp": "2026-04-25 06:58:13,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10372
          },
          {
            "timestamp": "2026-04-25 06:58:13,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10373
          },
          {
            "timestamp": "2026-04-25 06:58:13,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10374
          },
          {
            "timestamp": "2026-04-25 06:58:13,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10375
          },
          {
            "timestamp": "2026-04-25 06:58:13,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10376
          },
          {
            "timestamp": "2026-04-25 06:58:13,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10377
          },
          {
            "timestamp": "2026-04-25 06:58:13,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10378
          },
          {
            "timestamp": "2026-04-25 06:58:13,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10379
          },
          {
            "timestamp": "2026-04-25 06:58:13,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10380
          },
          {
            "timestamp": "2026-04-25 06:58:13,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10381
          },
          {
            "timestamp": "2026-04-25 06:58:13,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10382
          },
          {
            "timestamp": "2026-04-25 06:58:13,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10383
          },
          {
            "timestamp": "2026-04-25 06:58:13,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10384
          },
          {
            "timestamp": "2026-04-25 06:58:13,219",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10385
          },
          {
            "timestamp": "2026-04-25 06:58:13,219",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10386
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10387
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10388
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10389
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10390
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10391
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10392
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10393
          },
          {
            "timestamp": "2026-04-25 06:58:13,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10394
          },
          {
            "timestamp": "2026-04-25 06:58:13,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10395
          },
          {
            "timestamp": "2026-04-25 06:58:13,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10396
          },
          {
            "timestamp": "2026-04-25 06:58:13,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10397
          },
          {
            "timestamp": "2026-04-25 06:58:13,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10398
          },
          {
            "timestamp": "2026-04-25 06:58:13,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10399
          },
          {
            "timestamp": "2026-04-25 06:58:13,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10400
          },
          {
            "timestamp": "2026-04-25 06:58:13,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10401
          },
          {
            "timestamp": "2026-04-25 06:58:13,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10402
          },
          {
            "timestamp": "2026-04-25 06:58:13,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10403
          },
          {
            "timestamp": "2026-04-25 06:58:13,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10404
          },
          {
            "timestamp": "2026-04-25 06:58:13,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10405
          },
          {
            "timestamp": "2026-04-25 06:58:13,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10406
          },
          {
            "timestamp": "2026-04-25 06:58:13,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10407
          },
          {
            "timestamp": "2026-04-25 06:58:13,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10408
          },
          {
            "timestamp": "2026-04-25 06:58:13,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10409
          },
          {
            "timestamp": "2026-04-25 06:58:13,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10410
          },
          {
            "timestamp": "2026-04-25 06:58:13,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10411
          },
          {
            "timestamp": "2026-04-25 06:58:13,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10412
          },
          {
            "timestamp": "2026-04-25 06:58:13,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10413
          },
          {
            "timestamp": "2026-04-25 06:58:13,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10414
          },
          {
            "timestamp": "2026-04-25 06:58:13,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10415
          },
          {
            "timestamp": "2026-04-25 06:58:13,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10416
          },
          {
            "timestamp": "2026-04-25 06:58:13,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10417
          },
          {
            "timestamp": "2026-04-25 06:58:13,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10418
          },
          {
            "timestamp": "2026-04-25 06:58:13,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10419
          },
          {
            "timestamp": "2026-04-25 06:58:13,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10420
          },
          {
            "timestamp": "2026-04-25 06:58:13,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10421
          },
          {
            "timestamp": "2026-04-25 06:58:13,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10422
          },
          {
            "timestamp": "2026-04-25 06:58:13,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10423
          },
          {
            "timestamp": "2026-04-25 06:58:13,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10424
          },
          {
            "timestamp": "2026-04-25 06:58:13,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10425
          },
          {
            "timestamp": "2026-04-25 06:58:13,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10426
          },
          {
            "timestamp": "2026-04-25 06:58:13,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10427
          },
          {
            "timestamp": "2026-04-25 06:58:13,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10428
          },
          {
            "timestamp": "2026-04-25 06:58:13,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10429
          },
          {
            "timestamp": "2026-04-25 06:58:13,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10430
          },
          {
            "timestamp": "2026-04-25 06:58:13,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10431
          },
          {
            "timestamp": "2026-04-25 06:58:13,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10432
          },
          {
            "timestamp": "2026-04-25 06:58:13,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10433
          },
          {
            "timestamp": "2026-04-25 06:58:13,735",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10434
          },
          {
            "timestamp": "2026-04-25 06:58:13,735",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10435
          },
          {
            "timestamp": "2026-04-25 06:58:13,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10436
          },
          {
            "timestamp": "2026-04-25 06:58:13,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10437
          },
          {
            "timestamp": "2026-04-25 06:58:13,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10438
          },
          {
            "timestamp": "2026-04-25 06:58:13,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10439
          },
          {
            "timestamp": "2026-04-25 06:58:13,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10440
          },
          {
            "timestamp": "2026-04-25 06:58:13,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10441
          },
          {
            "timestamp": "2026-04-25 06:58:13,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10442
          },
          {
            "timestamp": "2026-04-25 06:58:13,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10443
          },
          {
            "timestamp": "2026-04-25 06:58:13,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10444
          },
          {
            "timestamp": "2026-04-25 06:58:13,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10445
          },
          {
            "timestamp": "2026-04-25 06:58:13,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10446
          },
          {
            "timestamp": "2026-04-25 06:58:13,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10447
          },
          {
            "timestamp": "2026-04-25 06:58:13,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10448
          },
          {
            "timestamp": "2026-04-25 06:58:13,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10449
          },
          {
            "timestamp": "2026-04-25 06:58:13,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10450
          },
          {
            "timestamp": "2026-04-25 06:58:13,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10451
          },
          {
            "timestamp": "2026-04-25 06:58:13,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10452
          },
          {
            "timestamp": "2026-04-25 06:58:13,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10453
          },
          {
            "timestamp": "2026-04-25 06:58:14,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10454
          },
          {
            "timestamp": "2026-04-25 06:58:14,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10455
          },
          {
            "timestamp": "2026-04-25 06:58:14,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10456
          },
          {
            "timestamp": "2026-04-25 06:58:14,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10457
          },
          {
            "timestamp": "2026-04-25 06:58:14,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10458
          },
          {
            "timestamp": "2026-04-25 06:58:14,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10459
          },
          {
            "timestamp": "2026-04-25 06:58:14,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10460
          },
          {
            "timestamp": "2026-04-25 06:58:14,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10461
          },
          {
            "timestamp": "2026-04-25 06:58:14,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10462
          },
          {
            "timestamp": "2026-04-25 06:58:14,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10463
          },
          {
            "timestamp": "2026-04-25 06:58:14,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10464
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x7385b070",
            "parentcaller": "0x7385b08b",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "16"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "5852"
              }
            ],
            "repeated": 0,
            "id": 10465
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x7726074f",
            "parentcaller": "0x77bfbb70",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "oleaut32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76060000"
              }
            ],
            "repeated": 0,
            "id": 10466
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x77eab5a6",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "5852"
              }
            ],
            "repeated": 0,
            "id": 10467
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x747cad94",
            "parentcaller": "0x747ca15c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000058c"
              }
            ],
            "repeated": 0,
            "id": 10468
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 10469
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x774e45ae",
            "parentcaller": "0x774e442c",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 10470
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x7726269a",
            "parentcaller": "0x76645041",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000062c"
              }
            ],
            "repeated": 0,
            "id": 10471
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000051c"
              }
            ],
            "repeated": 0,
            "id": 10472
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005ec"
              }
            ],
            "repeated": 0,
            "id": 10473
          },
          {
            "timestamp": "2026-04-25 06:58:14,141",
            "thread_id": "5852",
            "caller": "0x77eab5c9",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 10474
          },
          {
            "timestamp": "2026-04-25 06:58:14,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10475
          },
          {
            "timestamp": "2026-04-25 06:58:14,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10476
          },
          {
            "timestamp": "2026-04-25 06:58:14,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10477
          },
          {
            "timestamp": "2026-04-25 06:58:14,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10478
          },
          {
            "timestamp": "2026-04-25 06:58:14,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10479
          },
          {
            "timestamp": "2026-04-25 06:58:14,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10480
          },
          {
            "timestamp": "2026-04-25 06:58:14,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10481
          },
          {
            "timestamp": "2026-04-25 06:58:14,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10482
          },
          {
            "timestamp": "2026-04-25 06:58:14,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10483
          },
          {
            "timestamp": "2026-04-25 06:58:14,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10484
          },
          {
            "timestamp": "2026-04-25 06:58:14,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10485
          },
          {
            "timestamp": "2026-04-25 06:58:14,251",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10486
          },
          {
            "timestamp": "2026-04-25 06:58:14,251",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10487
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10488
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10489
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10490
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10491
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10492
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10493
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10494
          },
          {
            "timestamp": "2026-04-25 06:58:14,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10495
          },
          {
            "timestamp": "2026-04-25 06:58:14,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10496
          },
          {
            "timestamp": "2026-04-25 06:58:14,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10497
          },
          {
            "timestamp": "2026-04-25 06:58:14,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10498
          },
          {
            "timestamp": "2026-04-25 06:58:14,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10499
          },
          {
            "timestamp": "2026-04-25 06:58:14,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10500
          },
          {
            "timestamp": "2026-04-25 06:58:14,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10501
          },
          {
            "timestamp": "2026-04-25 06:58:14,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10502
          },
          {
            "timestamp": "2026-04-25 06:58:14,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10503
          },
          {
            "timestamp": "2026-04-25 06:58:14,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10504
          },
          {
            "timestamp": "2026-04-25 06:58:14,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10505
          },
          {
            "timestamp": "2026-04-25 06:58:14,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10506
          },
          {
            "timestamp": "2026-04-25 06:58:14,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10507
          },
          {
            "timestamp": "2026-04-25 06:58:14,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10508
          },
          {
            "timestamp": "2026-04-25 06:58:14,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10509
          },
          {
            "timestamp": "2026-04-25 06:58:14,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10510
          },
          {
            "timestamp": "2026-04-25 06:58:14,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10511
          },
          {
            "timestamp": "2026-04-25 06:58:14,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10512
          },
          {
            "timestamp": "2026-04-25 06:58:14,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10513
          },
          {
            "timestamp": "2026-04-25 06:58:14,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10514
          },
          {
            "timestamp": "2026-04-25 06:58:14,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10515
          },
          {
            "timestamp": "2026-04-25 06:58:14,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10516
          },
          {
            "timestamp": "2026-04-25 06:58:14,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10517
          },
          {
            "timestamp": "2026-04-25 06:58:14,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10518
          },
          {
            "timestamp": "2026-04-25 06:58:14,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10519
          },
          {
            "timestamp": "2026-04-25 06:58:14,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10520
          },
          {
            "timestamp": "2026-04-25 06:58:14,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10521
          },
          {
            "timestamp": "2026-04-25 06:58:14,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10522
          },
          {
            "timestamp": "2026-04-25 06:58:14,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10523
          },
          {
            "timestamp": "2026-04-25 06:58:14,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10524
          },
          {
            "timestamp": "2026-04-25 06:58:14,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10525
          },
          {
            "timestamp": "2026-04-25 06:58:14,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10526
          },
          {
            "timestamp": "2026-04-25 06:58:14,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10527
          },
          {
            "timestamp": "2026-04-25 06:58:14,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10528
          },
          {
            "timestamp": "2026-04-25 06:58:14,766",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10529
          },
          {
            "timestamp": "2026-04-25 06:58:14,766",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10530
          },
          {
            "timestamp": "2026-04-25 06:58:14,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10531
          },
          {
            "timestamp": "2026-04-25 06:58:14,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10532
          },
          {
            "timestamp": "2026-04-25 06:58:14,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10533
          },
          {
            "timestamp": "2026-04-25 06:58:14,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10534
          },
          {
            "timestamp": "2026-04-25 06:58:14,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10535
          },
          {
            "timestamp": "2026-04-25 06:58:14,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10536
          },
          {
            "timestamp": "2026-04-25 06:58:14,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10537
          },
          {
            "timestamp": "2026-04-25 06:58:14,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10538
          },
          {
            "timestamp": "2026-04-25 06:58:14,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10539
          },
          {
            "timestamp": "2026-04-25 06:58:14,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10540
          },
          {
            "timestamp": "2026-04-25 06:58:14,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10541
          },
          {
            "timestamp": "2026-04-25 06:58:14,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10542
          },
          {
            "timestamp": "2026-04-25 06:58:14,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10543
          },
          {
            "timestamp": "2026-04-25 06:58:14,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10544
          },
          {
            "timestamp": "2026-04-25 06:58:14,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10545
          },
          {
            "timestamp": "2026-04-25 06:58:14,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10546
          },
          {
            "timestamp": "2026-04-25 06:58:14,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10547
          },
          {
            "timestamp": "2026-04-25 06:58:14,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10548
          },
          {
            "timestamp": "2026-04-25 06:58:14,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10549
          },
          {
            "timestamp": "2026-04-25 06:58:14,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10550
          },
          {
            "timestamp": "2026-04-25 06:58:15,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10551
          },
          {
            "timestamp": "2026-04-25 06:58:15,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10552
          },
          {
            "timestamp": "2026-04-25 06:58:15,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10553
          },
          {
            "timestamp": "2026-04-25 06:58:15,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10554
          },
          {
            "timestamp": "2026-04-25 06:58:15,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10555
          },
          {
            "timestamp": "2026-04-25 06:58:15,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10556
          },
          {
            "timestamp": "2026-04-25 06:58:15,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10557
          },
          {
            "timestamp": "2026-04-25 06:58:15,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10558
          },
          {
            "timestamp": "2026-04-25 06:58:15,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10559
          },
          {
            "timestamp": "2026-04-25 06:58:15,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10560
          },
          {
            "timestamp": "2026-04-25 06:58:15,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10561
          },
          {
            "timestamp": "2026-04-25 06:58:15,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10562
          },
          {
            "timestamp": "2026-04-25 06:58:15,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10563
          },
          {
            "timestamp": "2026-04-25 06:58:15,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10564
          },
          {
            "timestamp": "2026-04-25 06:58:15,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10565
          },
          {
            "timestamp": "2026-04-25 06:58:15,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10566
          },
          {
            "timestamp": "2026-04-25 06:58:15,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10567
          },
          {
            "timestamp": "2026-04-25 06:58:15,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10568
          },
          {
            "timestamp": "2026-04-25 06:58:15,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10569
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10570
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10571
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10572
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10573
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10574
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10575
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10576
          },
          {
            "timestamp": "2026-04-25 06:58:15,282",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10577
          },
          {
            "timestamp": "2026-04-25 06:58:15,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10578
          },
          {
            "timestamp": "2026-04-25 06:58:15,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10579
          },
          {
            "timestamp": "2026-04-25 06:58:15,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10580
          },
          {
            "timestamp": "2026-04-25 06:58:15,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10581
          },
          {
            "timestamp": "2026-04-25 06:58:15,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10582
          },
          {
            "timestamp": "2026-04-25 06:58:15,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10583
          },
          {
            "timestamp": "2026-04-25 06:58:15,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10584
          },
          {
            "timestamp": "2026-04-25 06:58:15,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10585
          },
          {
            "timestamp": "2026-04-25 06:58:15,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10586
          },
          {
            "timestamp": "2026-04-25 06:58:15,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10587
          },
          {
            "timestamp": "2026-04-25 06:58:15,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10588
          },
          {
            "timestamp": "2026-04-25 06:58:15,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10589
          },
          {
            "timestamp": "2026-04-25 06:58:15,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10590
          },
          {
            "timestamp": "2026-04-25 06:58:15,469",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076bc7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 10591
          },
          {
            "timestamp": "2026-04-25 06:58:15,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10592
          },
          {
            "timestamp": "2026-04-25 06:58:15,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10593
          },
          {
            "timestamp": "2026-04-25 06:58:15,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10594
          },
          {
            "timestamp": "2026-04-25 06:58:15,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10595
          },
          {
            "timestamp": "2026-04-25 06:58:15,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10596
          },
          {
            "timestamp": "2026-04-25 06:58:15,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10597
          },
          {
            "timestamp": "2026-04-25 06:58:15,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10598
          },
          {
            "timestamp": "2026-04-25 06:58:15,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10599
          },
          {
            "timestamp": "2026-04-25 06:58:15,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10600
          },
          {
            "timestamp": "2026-04-25 06:58:15,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10601
          },
          {
            "timestamp": "2026-04-25 06:58:15,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10602
          },
          {
            "timestamp": "2026-04-25 06:58:15,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10603
          },
          {
            "timestamp": "2026-04-25 06:58:15,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10604
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 10605
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 10606
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10607
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000544",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1348"
              }
            ],
            "repeated": 0,
            "id": 10608
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 10609
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 10610
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000544"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 10611
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 10612
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 10613
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10614
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10615
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10616
          },
          {
            "timestamp": "2026-04-25 06:58:15,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10617
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 10618
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 10619
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 10620
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 10621
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 10622
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 10623
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1348"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 10624
          },
          {
            "timestamp": "2026-04-25 06:58:15,626",
            "thread_id": "800",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              }
            ],
            "repeated": 0,
            "id": 10625
          },
          {
            "timestamp": "2026-04-25 06:58:15,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10626
          },
          {
            "timestamp": "2026-04-25 06:58:15,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10627
          },
          {
            "timestamp": "2026-04-25 06:58:15,641",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 10628
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10629
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10630
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10631
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10632
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10633
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10634
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10635
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1348"
              }
            ],
            "repeated": 0,
            "id": 10636
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 10637
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 10638
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10639
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10640
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 10641
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10642
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10643
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10644
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10645
          },
          {
            "timestamp": "2026-04-25 06:58:15,657",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 13,
            "id": 10646
          },
          {
            "timestamp": "2026-04-25 06:58:15,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10647
          },
          {
            "timestamp": "2026-04-25 06:58:15,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10648
          },
          {
            "timestamp": "2026-04-25 06:58:15,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10649
          },
          {
            "timestamp": "2026-04-25 06:58:15,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10650
          },
          {
            "timestamp": "2026-04-25 06:58:15,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10651
          },
          {
            "timestamp": "2026-04-25 06:58:15,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10652
          },
          {
            "timestamp": "2026-04-25 06:58:15,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10653
          },
          {
            "timestamp": "2026-04-25 06:58:15,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10654
          },
          {
            "timestamp": "2026-04-25 06:58:15,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10655
          },
          {
            "timestamp": "2026-04-25 06:58:15,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10656
          },
          {
            "timestamp": "2026-04-25 06:58:15,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10657
          },
          {
            "timestamp": "2026-04-25 06:58:15,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10658
          },
          {
            "timestamp": "2026-04-25 06:58:15,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10659
          },
          {
            "timestamp": "2026-04-25 06:58:15,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10660
          },
          {
            "timestamp": "2026-04-25 06:58:15,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10661
          },
          {
            "timestamp": "2026-04-25 06:58:15,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10662
          },
          {
            "timestamp": "2026-04-25 06:58:15,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10663
          },
          {
            "timestamp": "2026-04-25 06:58:15,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10664
          },
          {
            "timestamp": "2026-04-25 06:58:15,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10665
          },
          {
            "timestamp": "2026-04-25 06:58:15,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10666
          },
          {
            "timestamp": "2026-04-25 06:58:15,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10667
          },
          {
            "timestamp": "2026-04-25 06:58:15,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10668
          },
          {
            "timestamp": "2026-04-25 06:58:15,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10669
          },
          {
            "timestamp": "2026-04-25 06:58:15,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10670
          },
          {
            "timestamp": "2026-04-25 06:58:15,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10671
          },
          {
            "timestamp": "2026-04-25 06:58:15,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10672
          },
          {
            "timestamp": "2026-04-25 06:58:15,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10673
          },
          {
            "timestamp": "2026-04-25 06:58:16,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10674
          },
          {
            "timestamp": "2026-04-25 06:58:16,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10675
          },
          {
            "timestamp": "2026-04-25 06:58:16,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10676
          },
          {
            "timestamp": "2026-04-25 06:58:16,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10677
          },
          {
            "timestamp": "2026-04-25 06:58:16,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10678
          },
          {
            "timestamp": "2026-04-25 06:58:16,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10679
          },
          {
            "timestamp": "2026-04-25 06:58:16,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10680
          },
          {
            "timestamp": "2026-04-25 06:58:16,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10681
          },
          {
            "timestamp": "2026-04-25 06:58:16,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10682
          },
          {
            "timestamp": "2026-04-25 06:58:16,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10683
          },
          {
            "timestamp": "2026-04-25 06:58:16,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10684
          },
          {
            "timestamp": "2026-04-25 06:58:16,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10685
          },
          {
            "timestamp": "2026-04-25 06:58:16,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10686
          },
          {
            "timestamp": "2026-04-25 06:58:16,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10687
          },
          {
            "timestamp": "2026-04-25 06:58:16,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10688
          },
          {
            "timestamp": "2026-04-25 06:58:16,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10689
          },
          {
            "timestamp": "2026-04-25 06:58:16,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10690
          },
          {
            "timestamp": "2026-04-25 06:58:16,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10691
          },
          {
            "timestamp": "2026-04-25 06:58:16,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10692
          },
          {
            "timestamp": "2026-04-25 06:58:16,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10693
          },
          {
            "timestamp": "2026-04-25 06:58:16,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10694
          },
          {
            "timestamp": "2026-04-25 06:58:16,282",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10695
          },
          {
            "timestamp": "2026-04-25 06:58:16,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10696
          },
          {
            "timestamp": "2026-04-25 06:58:16,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10697
          },
          {
            "timestamp": "2026-04-25 06:58:16,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10698
          },
          {
            "timestamp": "2026-04-25 06:58:16,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10699
          },
          {
            "timestamp": "2026-04-25 06:58:16,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10700
          },
          {
            "timestamp": "2026-04-25 06:58:16,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10701
          },
          {
            "timestamp": "2026-04-25 06:58:16,313",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10702
          },
          {
            "timestamp": "2026-04-25 06:58:16,313",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10703
          },
          {
            "timestamp": "2026-04-25 06:58:16,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10704
          },
          {
            "timestamp": "2026-04-25 06:58:16,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10705
          },
          {
            "timestamp": "2026-04-25 06:58:16,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10706
          },
          {
            "timestamp": "2026-04-25 06:58:16,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10707
          },
          {
            "timestamp": "2026-04-25 06:58:16,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10708
          },
          {
            "timestamp": "2026-04-25 06:58:16,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10709
          },
          {
            "timestamp": "2026-04-25 06:58:16,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10710
          },
          {
            "timestamp": "2026-04-25 06:58:16,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10711
          },
          {
            "timestamp": "2026-04-25 06:58:16,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10712
          },
          {
            "timestamp": "2026-04-25 06:58:16,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10713
          },
          {
            "timestamp": "2026-04-25 06:58:16,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10714
          },
          {
            "timestamp": "2026-04-25 06:58:16,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10715
          },
          {
            "timestamp": "2026-04-25 06:58:16,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10716
          },
          {
            "timestamp": "2026-04-25 06:58:16,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10717
          },
          {
            "timestamp": "2026-04-25 06:58:16,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10718
          },
          {
            "timestamp": "2026-04-25 06:58:16,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10719
          },
          {
            "timestamp": "2026-04-25 06:58:16,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10720
          },
          {
            "timestamp": "2026-04-25 06:58:16,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10721
          },
          {
            "timestamp": "2026-04-25 06:58:16,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10722
          },
          {
            "timestamp": "2026-04-25 06:58:16,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10723
          },
          {
            "timestamp": "2026-04-25 06:58:16,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10724
          },
          {
            "timestamp": "2026-04-25 06:58:16,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10725
          },
          {
            "timestamp": "2026-04-25 06:58:16,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10726
          },
          {
            "timestamp": "2026-04-25 06:58:16,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10727
          },
          {
            "timestamp": "2026-04-25 06:58:16,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10728
          },
          {
            "timestamp": "2026-04-25 06:58:16,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10729
          },
          {
            "timestamp": "2026-04-25 06:58:16,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10730
          },
          {
            "timestamp": "2026-04-25 06:58:16,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10731
          },
          {
            "timestamp": "2026-04-25 06:58:16,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10732
          },
          {
            "timestamp": "2026-04-25 06:58:16,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10733
          },
          {
            "timestamp": "2026-04-25 06:58:16,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10734
          },
          {
            "timestamp": "2026-04-25 06:58:16,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10735
          },
          {
            "timestamp": "2026-04-25 06:58:16,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10736
          },
          {
            "timestamp": "2026-04-25 06:58:16,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10737
          },
          {
            "timestamp": "2026-04-25 06:58:16,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10738
          },
          {
            "timestamp": "2026-04-25 06:58:16,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10739
          },
          {
            "timestamp": "2026-04-25 06:58:16,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10740
          },
          {
            "timestamp": "2026-04-25 06:58:16,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10741
          },
          {
            "timestamp": "2026-04-25 06:58:16,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10742
          },
          {
            "timestamp": "2026-04-25 06:58:16,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10743
          },
          {
            "timestamp": "2026-04-25 06:58:16,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10744
          },
          {
            "timestamp": "2026-04-25 06:58:16,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10745
          },
          {
            "timestamp": "2026-04-25 06:58:16,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10746
          },
          {
            "timestamp": "2026-04-25 06:58:16,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10747
          },
          {
            "timestamp": "2026-04-25 06:58:16,829",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10748
          },
          {
            "timestamp": "2026-04-25 06:58:16,829",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10749
          },
          {
            "timestamp": "2026-04-25 06:58:16,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10750
          },
          {
            "timestamp": "2026-04-25 06:58:16,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10751
          },
          {
            "timestamp": "2026-04-25 06:58:16,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10752
          },
          {
            "timestamp": "2026-04-25 06:58:16,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10753
          },
          {
            "timestamp": "2026-04-25 06:58:16,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10754
          },
          {
            "timestamp": "2026-04-25 06:58:16,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10755
          },
          {
            "timestamp": "2026-04-25 06:58:16,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10756
          },
          {
            "timestamp": "2026-04-25 06:58:16,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10757
          },
          {
            "timestamp": "2026-04-25 06:58:16,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10758
          },
          {
            "timestamp": "2026-04-25 06:58:16,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10759
          },
          {
            "timestamp": "2026-04-25 06:58:16,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10760
          },
          {
            "timestamp": "2026-04-25 06:58:16,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10761
          },
          {
            "timestamp": "2026-04-25 06:58:16,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10762
          },
          {
            "timestamp": "2026-04-25 06:58:16,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10763
          },
          {
            "timestamp": "2026-04-25 06:58:16,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10764
          },
          {
            "timestamp": "2026-04-25 06:58:17,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10765
          },
          {
            "timestamp": "2026-04-25 06:58:17,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10766
          },
          {
            "timestamp": "2026-04-25 06:58:17,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10767
          },
          {
            "timestamp": "2026-04-25 06:58:17,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10768
          },
          {
            "timestamp": "2026-04-25 06:58:17,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10769
          },
          {
            "timestamp": "2026-04-25 06:58:17,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10770
          },
          {
            "timestamp": "2026-04-25 06:58:17,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10771
          },
          {
            "timestamp": "2026-04-25 06:58:17,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10772
          },
          {
            "timestamp": "2026-04-25 06:58:17,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10773
          },
          {
            "timestamp": "2026-04-25 06:58:17,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10774
          },
          {
            "timestamp": "2026-04-25 06:58:17,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10775
          },
          {
            "timestamp": "2026-04-25 06:58:17,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10776
          },
          {
            "timestamp": "2026-04-25 06:58:17,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10777
          },
          {
            "timestamp": "2026-04-25 06:58:17,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10778
          },
          {
            "timestamp": "2026-04-25 06:58:17,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10779
          },
          {
            "timestamp": "2026-04-25 06:58:17,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10780
          },
          {
            "timestamp": "2026-04-25 06:58:17,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10781
          },
          {
            "timestamp": "2026-04-25 06:58:17,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10782
          },
          {
            "timestamp": "2026-04-25 06:58:17,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10783
          },
          {
            "timestamp": "2026-04-25 06:58:17,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10784
          },
          {
            "timestamp": "2026-04-25 06:58:17,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10785
          },
          {
            "timestamp": "2026-04-25 06:58:17,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10786
          },
          {
            "timestamp": "2026-04-25 06:58:17,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10787
          },
          {
            "timestamp": "2026-04-25 06:58:17,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10788
          },
          {
            "timestamp": "2026-04-25 06:58:17,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10789
          },
          {
            "timestamp": "2026-04-25 06:58:17,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10790
          },
          {
            "timestamp": "2026-04-25 06:58:17,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10791
          },
          {
            "timestamp": "2026-04-25 06:58:17,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10792
          },
          {
            "timestamp": "2026-04-25 06:58:17,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10793
          },
          {
            "timestamp": "2026-04-25 06:58:17,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10794
          },
          {
            "timestamp": "2026-04-25 06:58:17,344",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10795
          },
          {
            "timestamp": "2026-04-25 06:58:17,344",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10796
          },
          {
            "timestamp": "2026-04-25 06:58:17,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10797
          },
          {
            "timestamp": "2026-04-25 06:58:17,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10798
          },
          {
            "timestamp": "2026-04-25 06:58:17,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10799
          },
          {
            "timestamp": "2026-04-25 06:58:17,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10800
          },
          {
            "timestamp": "2026-04-25 06:58:17,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10801
          },
          {
            "timestamp": "2026-04-25 06:58:17,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10802
          },
          {
            "timestamp": "2026-04-25 06:58:17,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10803
          },
          {
            "timestamp": "2026-04-25 06:58:17,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10804
          },
          {
            "timestamp": "2026-04-25 06:58:17,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10805
          },
          {
            "timestamp": "2026-04-25 06:58:17,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10806
          },
          {
            "timestamp": "2026-04-25 06:58:17,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10807
          },
          {
            "timestamp": "2026-04-25 06:58:17,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10808
          },
          {
            "timestamp": "2026-04-25 06:58:17,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10809
          },
          {
            "timestamp": "2026-04-25 06:58:17,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10810
          },
          {
            "timestamp": "2026-04-25 06:58:17,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10811
          },
          {
            "timestamp": "2026-04-25 06:58:17,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10812
          },
          {
            "timestamp": "2026-04-25 06:58:17,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10813
          },
          {
            "timestamp": "2026-04-25 06:58:17,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10814
          },
          {
            "timestamp": "2026-04-25 06:58:17,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10815
          },
          {
            "timestamp": "2026-04-25 06:58:17,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10816
          },
          {
            "timestamp": "2026-04-25 06:58:17,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10817
          },
          {
            "timestamp": "2026-04-25 06:58:17,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10818
          },
          {
            "timestamp": "2026-04-25 06:58:17,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10819
          },
          {
            "timestamp": "2026-04-25 06:58:17,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10820
          },
          {
            "timestamp": "2026-04-25 06:58:17,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10821
          },
          {
            "timestamp": "2026-04-25 06:58:17,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10822
          },
          {
            "timestamp": "2026-04-25 06:58:17,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10823
          },
          {
            "timestamp": "2026-04-25 06:58:17,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10824
          },
          {
            "timestamp": "2026-04-25 06:58:17,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10825
          },
          {
            "timestamp": "2026-04-25 06:58:17,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10826
          },
          {
            "timestamp": "2026-04-25 06:58:17,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10827
          },
          {
            "timestamp": "2026-04-25 06:58:17,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10828
          },
          {
            "timestamp": "2026-04-25 06:58:17,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10829
          },
          {
            "timestamp": "2026-04-25 06:58:17,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10830
          },
          {
            "timestamp": "2026-04-25 06:58:17,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10831
          },
          {
            "timestamp": "2026-04-25 06:58:17,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10832
          },
          {
            "timestamp": "2026-04-25 06:58:17,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10833
          },
          {
            "timestamp": "2026-04-25 06:58:17,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10834
          },
          {
            "timestamp": "2026-04-25 06:58:17,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10835
          },
          {
            "timestamp": "2026-04-25 06:58:17,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10836
          },
          {
            "timestamp": "2026-04-25 06:58:17,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10837
          },
          {
            "timestamp": "2026-04-25 06:58:17,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10838
          },
          {
            "timestamp": "2026-04-25 06:58:17,860",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10839
          },
          {
            "timestamp": "2026-04-25 06:58:17,860",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10840
          },
          {
            "timestamp": "2026-04-25 06:58:17,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10841
          },
          {
            "timestamp": "2026-04-25 06:58:17,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10842
          },
          {
            "timestamp": "2026-04-25 06:58:17,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10843
          },
          {
            "timestamp": "2026-04-25 06:58:17,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10844
          },
          {
            "timestamp": "2026-04-25 06:58:17,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10845
          },
          {
            "timestamp": "2026-04-25 06:58:17,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10846
          },
          {
            "timestamp": "2026-04-25 06:58:17,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10847
          },
          {
            "timestamp": "2026-04-25 06:58:17,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10848
          },
          {
            "timestamp": "2026-04-25 06:58:17,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10849
          },
          {
            "timestamp": "2026-04-25 06:58:17,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10850
          },
          {
            "timestamp": "2026-04-25 06:58:18,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10851
          },
          {
            "timestamp": "2026-04-25 06:58:18,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10852
          },
          {
            "timestamp": "2026-04-25 06:58:18,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10853
          },
          {
            "timestamp": "2026-04-25 06:58:18,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10854
          },
          {
            "timestamp": "2026-04-25 06:58:18,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10855
          },
          {
            "timestamp": "2026-04-25 06:58:18,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10856
          },
          {
            "timestamp": "2026-04-25 06:58:18,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10857
          },
          {
            "timestamp": "2026-04-25 06:58:18,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10858
          },
          {
            "timestamp": "2026-04-25 06:58:18,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10859
          },
          {
            "timestamp": "2026-04-25 06:58:18,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10860
          },
          {
            "timestamp": "2026-04-25 06:58:18,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10861
          },
          {
            "timestamp": "2026-04-25 06:58:18,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10862
          },
          {
            "timestamp": "2026-04-25 06:58:18,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10863
          },
          {
            "timestamp": "2026-04-25 06:58:18,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10864
          },
          {
            "timestamp": "2026-04-25 06:58:18,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10865
          },
          {
            "timestamp": "2026-04-25 06:58:18,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10866
          },
          {
            "timestamp": "2026-04-25 06:58:18,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10867
          },
          {
            "timestamp": "2026-04-25 06:58:18,282",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10868
          },
          {
            "timestamp": "2026-04-25 06:58:18,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10869
          },
          {
            "timestamp": "2026-04-25 06:58:18,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10870
          },
          {
            "timestamp": "2026-04-25 06:58:18,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10871
          },
          {
            "timestamp": "2026-04-25 06:58:18,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10872
          },
          {
            "timestamp": "2026-04-25 06:58:18,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10873
          },
          {
            "timestamp": "2026-04-25 06:58:18,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10874
          },
          {
            "timestamp": "2026-04-25 06:58:18,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10875
          },
          {
            "timestamp": "2026-04-25 06:58:18,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10876
          },
          {
            "timestamp": "2026-04-25 06:58:18,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10877
          },
          {
            "timestamp": "2026-04-25 06:58:18,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10878
          },
          {
            "timestamp": "2026-04-25 06:58:18,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10879
          },
          {
            "timestamp": "2026-04-25 06:58:18,376",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10880
          },
          {
            "timestamp": "2026-04-25 06:58:18,376",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10881
          },
          {
            "timestamp": "2026-04-25 06:58:18,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10882
          },
          {
            "timestamp": "2026-04-25 06:58:18,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10883
          },
          {
            "timestamp": "2026-04-25 06:58:18,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10884
          },
          {
            "timestamp": "2026-04-25 06:58:18,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10885
          },
          {
            "timestamp": "2026-04-25 06:58:18,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10886
          },
          {
            "timestamp": "2026-04-25 06:58:18,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10887
          },
          {
            "timestamp": "2026-04-25 06:58:18,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10888
          },
          {
            "timestamp": "2026-04-25 06:58:18,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10889
          },
          {
            "timestamp": "2026-04-25 06:58:18,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10890
          },
          {
            "timestamp": "2026-04-25 06:58:18,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10891
          },
          {
            "timestamp": "2026-04-25 06:58:18,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10892
          },
          {
            "timestamp": "2026-04-25 06:58:18,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10893
          },
          {
            "timestamp": "2026-04-25 06:58:18,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10894
          },
          {
            "timestamp": "2026-04-25 06:58:18,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10895
          },
          {
            "timestamp": "2026-04-25 06:58:18,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10896
          },
          {
            "timestamp": "2026-04-25 06:58:18,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10897
          },
          {
            "timestamp": "2026-04-25 06:58:18,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10898
          },
          {
            "timestamp": "2026-04-25 06:58:18,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10899
          },
          {
            "timestamp": "2026-04-25 06:58:18,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10900
          },
          {
            "timestamp": "2026-04-25 06:58:18,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10901
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10902
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x0788142c",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "K32EnumProcesses",
            "status": true,
            "return": "0x00000001",
            "arguments": [],
            "repeated": 0,
            "id": 10903
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06622000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 10904
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": false,
            "return": "0xffffffffc0000004",
            "pretty_return": "INFO_LENGTH_MISMATCH",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 10905
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06642000"
              },
              {
                "name": "RegionSize",
                "value": "0x00035000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 10906
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 10907
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x0288a3a6",
            "parentcaller": "0x0507b764",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 10908
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10909
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10910
          },
          {
            "timestamp": "2026-04-25 06:58:18,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10911
          },
          {
            "timestamp": "2026-04-25 06:58:18,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10912
          },
          {
            "timestamp": "2026-04-25 06:58:18,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10913
          },
          {
            "timestamp": "2026-04-25 06:58:18,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10914
          },
          {
            "timestamp": "2026-04-25 06:58:18,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10915
          },
          {
            "timestamp": "2026-04-25 06:58:18,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10916
          },
          {
            "timestamp": "2026-04-25 06:58:18,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10917
          },
          {
            "timestamp": "2026-04-25 06:58:18,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10918
          },
          {
            "timestamp": "2026-04-25 06:58:18,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10919
          },
          {
            "timestamp": "2026-04-25 06:58:18,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10920
          },
          {
            "timestamp": "2026-04-25 06:58:18,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10921
          },
          {
            "timestamp": "2026-04-25 06:58:18,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10922
          },
          {
            "timestamp": "2026-04-25 06:58:18,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10923
          },
          {
            "timestamp": "2026-04-25 06:58:18,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10924
          },
          {
            "timestamp": "2026-04-25 06:58:18,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10925
          },
          {
            "timestamp": "2026-04-25 06:58:18,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10926
          },
          {
            "timestamp": "2026-04-25 06:58:18,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10927
          },
          {
            "timestamp": "2026-04-25 06:58:18,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10928
          },
          {
            "timestamp": "2026-04-25 06:58:18,891",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10929
          },
          {
            "timestamp": "2026-04-25 06:58:18,891",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10930
          },
          {
            "timestamp": "2026-04-25 06:58:18,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10931
          },
          {
            "timestamp": "2026-04-25 06:58:18,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10932
          },
          {
            "timestamp": "2026-04-25 06:58:18,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10933
          },
          {
            "timestamp": "2026-04-25 06:58:18,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10934
          },
          {
            "timestamp": "2026-04-25 06:58:18,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10935
          },
          {
            "timestamp": "2026-04-25 06:58:18,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10936
          },
          {
            "timestamp": "2026-04-25 06:58:18,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10937
          },
          {
            "timestamp": "2026-04-25 06:58:18,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10938
          },
          {
            "timestamp": "2026-04-25 06:58:18,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10939
          },
          {
            "timestamp": "2026-04-25 06:58:18,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10940
          },
          {
            "timestamp": "2026-04-25 06:58:18,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10941
          },
          {
            "timestamp": "2026-04-25 06:58:19,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10942
          },
          {
            "timestamp": "2026-04-25 06:58:19,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10943
          },
          {
            "timestamp": "2026-04-25 06:58:19,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10944
          },
          {
            "timestamp": "2026-04-25 06:58:19,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10945
          },
          {
            "timestamp": "2026-04-25 06:58:19,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10946
          },
          {
            "timestamp": "2026-04-25 06:58:19,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10947
          },
          {
            "timestamp": "2026-04-25 06:58:19,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10948
          },
          {
            "timestamp": "2026-04-25 06:58:19,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10949
          },
          {
            "timestamp": "2026-04-25 06:58:19,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10950
          },
          {
            "timestamp": "2026-04-25 06:58:19,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10951
          },
          {
            "timestamp": "2026-04-25 06:58:19,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10952
          },
          {
            "timestamp": "2026-04-25 06:58:19,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10953
          },
          {
            "timestamp": "2026-04-25 06:58:19,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10954
          },
          {
            "timestamp": "2026-04-25 06:58:19,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10955
          },
          {
            "timestamp": "2026-04-25 06:58:19,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10956
          },
          {
            "timestamp": "2026-04-25 06:58:19,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10957
          },
          {
            "timestamp": "2026-04-25 06:58:19,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10958
          },
          {
            "timestamp": "2026-04-25 06:58:19,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10959
          },
          {
            "timestamp": "2026-04-25 06:58:19,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10960
          },
          {
            "timestamp": "2026-04-25 06:58:19,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10961
          },
          {
            "timestamp": "2026-04-25 06:58:19,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10962
          },
          {
            "timestamp": "2026-04-25 06:58:19,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10963
          },
          {
            "timestamp": "2026-04-25 06:58:19,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 10964
          },
          {
            "timestamp": "2026-04-25 06:58:19,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10965
          },
          {
            "timestamp": "2026-04-25 06:58:19,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10966
          },
          {
            "timestamp": "2026-04-25 06:58:19,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10967
          },
          {
            "timestamp": "2026-04-25 06:58:19,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10968
          },
          {
            "timestamp": "2026-04-25 06:58:19,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10969
          },
          {
            "timestamp": "2026-04-25 06:58:19,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10970
          },
          {
            "timestamp": "2026-04-25 06:58:19,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10971
          },
          {
            "timestamp": "2026-04-25 06:58:19,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10972
          },
          {
            "timestamp": "2026-04-25 06:58:19,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10973
          },
          {
            "timestamp": "2026-04-25 06:58:19,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10974
          },
          {
            "timestamp": "2026-04-25 06:58:19,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10975
          },
          {
            "timestamp": "2026-04-25 06:58:19,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10976
          },
          {
            "timestamp": "2026-04-25 06:58:19,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10977
          },
          {
            "timestamp": "2026-04-25 06:58:19,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10978
          },
          {
            "timestamp": "2026-04-25 06:58:19,407",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 10979
          },
          {
            "timestamp": "2026-04-25 06:58:19,407",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 10980
          },
          {
            "timestamp": "2026-04-25 06:58:19,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10981
          },
          {
            "timestamp": "2026-04-25 06:58:19,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10982
          },
          {
            "timestamp": "2026-04-25 06:58:19,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10983
          },
          {
            "timestamp": "2026-04-25 06:58:19,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10984
          },
          {
            "timestamp": "2026-04-25 06:58:19,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10985
          },
          {
            "timestamp": "2026-04-25 06:58:19,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10986
          },
          {
            "timestamp": "2026-04-25 06:58:19,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10987
          },
          {
            "timestamp": "2026-04-25 06:58:19,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10988
          },
          {
            "timestamp": "2026-04-25 06:58:19,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10989
          },
          {
            "timestamp": "2026-04-25 06:58:19,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10990
          },
          {
            "timestamp": "2026-04-25 06:58:19,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10991
          },
          {
            "timestamp": "2026-04-25 06:58:19,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 10992
          },
          {
            "timestamp": "2026-04-25 06:58:19,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10993
          },
          {
            "timestamp": "2026-04-25 06:58:19,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 10994
          },
          {
            "timestamp": "2026-04-25 06:58:19,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10995
          },
          {
            "timestamp": "2026-04-25 06:58:19,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10996
          },
          {
            "timestamp": "2026-04-25 06:58:19,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10997
          },
          {
            "timestamp": "2026-04-25 06:58:19,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 10998
          },
          {
            "timestamp": "2026-04-25 06:58:19,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 10999
          },
          {
            "timestamp": "2026-04-25 06:58:19,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11000
          },
          {
            "timestamp": "2026-04-25 06:58:19,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11001
          },
          {
            "timestamp": "2026-04-25 06:58:19,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11002
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11003
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06677000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 11004
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11005
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11006
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11007
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11008
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 11009
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11010
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000003e4",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "996"
              }
            ],
            "repeated": 0,
            "id": 11011
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 11012
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 11013
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 11014
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11015
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000003e4"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 11016
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 11017
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11018
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11019
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11020
          },
          {
            "timestamp": "2026-04-25 06:58:19,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11021
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 11022
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 11023
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 11024
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 11025
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 11026
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 11027
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "996"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 11028
          },
          {
            "timestamp": "2026-04-25 06:58:19,688",
            "thread_id": "5976",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              }
            ],
            "repeated": 0,
            "id": 11029
          },
          {
            "timestamp": "2026-04-25 06:58:19,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11030
          },
          {
            "timestamp": "2026-04-25 06:58:19,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11031
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11032
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11033
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11034
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11035
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11036
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11037
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11038
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11039
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 11040
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "5976",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "996"
              }
            ],
            "repeated": 0,
            "id": 11041
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "5976",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 11042
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "5976",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 11043
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11044
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "6328",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 11045
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "5976",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 14,
            "id": 11046
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11047
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11048
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11049
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "800",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006bc"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2788"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "8160"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 11050
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "800",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000006bc",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2788"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "8160"
              }
            ],
            "repeated": 0,
            "id": 11051
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "800",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006bc"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "8160"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 11052
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "8160",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 11053
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "8160",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11054
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "8160",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 11055
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "8160",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 11056
          },
          {
            "timestamp": "2026-04-25 06:58:19,719",
            "thread_id": "8160",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x08751000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 11057
          },
          {
            "timestamp": "2026-04-25 06:58:19,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11058
          },
          {
            "timestamp": "2026-04-25 06:58:19,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11059
          },
          {
            "timestamp": "2026-04-25 06:58:19,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11060
          },
          {
            "timestamp": "2026-04-25 06:58:19,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11061
          },
          {
            "timestamp": "2026-04-25 06:58:19,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11062
          },
          {
            "timestamp": "2026-04-25 06:58:19,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11063
          },
          {
            "timestamp": "2026-04-25 06:58:19,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11064
          },
          {
            "timestamp": "2026-04-25 06:58:19,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11065
          },
          {
            "timestamp": "2026-04-25 06:58:19,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11066
          },
          {
            "timestamp": "2026-04-25 06:58:19,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11067
          },
          {
            "timestamp": "2026-04-25 06:58:19,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11068
          },
          {
            "timestamp": "2026-04-25 06:58:19,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11069
          },
          {
            "timestamp": "2026-04-25 06:58:19,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11070
          },
          {
            "timestamp": "2026-04-25 06:58:19,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11071
          },
          {
            "timestamp": "2026-04-25 06:58:19,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11072
          },
          {
            "timestamp": "2026-04-25 06:58:19,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11073
          },
          {
            "timestamp": "2026-04-25 06:58:19,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11074
          },
          {
            "timestamp": "2026-04-25 06:58:19,922",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11075
          },
          {
            "timestamp": "2026-04-25 06:58:19,922",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11076
          },
          {
            "timestamp": "2026-04-25 06:58:19,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11077
          },
          {
            "timestamp": "2026-04-25 06:58:19,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11078
          },
          {
            "timestamp": "2026-04-25 06:58:19,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11079
          },
          {
            "timestamp": "2026-04-25 06:58:19,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11080
          },
          {
            "timestamp": "2026-04-25 06:58:19,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11081
          },
          {
            "timestamp": "2026-04-25 06:58:20,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11082
          },
          {
            "timestamp": "2026-04-25 06:58:20,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11083
          },
          {
            "timestamp": "2026-04-25 06:58:20,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11084
          },
          {
            "timestamp": "2026-04-25 06:58:20,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11085
          },
          {
            "timestamp": "2026-04-25 06:58:20,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11086
          },
          {
            "timestamp": "2026-04-25 06:58:20,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11087
          },
          {
            "timestamp": "2026-04-25 06:58:20,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11088
          },
          {
            "timestamp": "2026-04-25 06:58:20,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11089
          },
          {
            "timestamp": "2026-04-25 06:58:20,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11090
          },
          {
            "timestamp": "2026-04-25 06:58:20,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11091
          },
          {
            "timestamp": "2026-04-25 06:58:20,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11092
          },
          {
            "timestamp": "2026-04-25 06:58:20,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11093
          },
          {
            "timestamp": "2026-04-25 06:58:20,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11094
          },
          {
            "timestamp": "2026-04-25 06:58:20,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11095
          },
          {
            "timestamp": "2026-04-25 06:58:20,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11096
          },
          {
            "timestamp": "2026-04-25 06:58:20,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11097
          },
          {
            "timestamp": "2026-04-25 06:58:20,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11098
          },
          {
            "timestamp": "2026-04-25 06:58:20,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11099
          },
          {
            "timestamp": "2026-04-25 06:58:20,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11100
          },
          {
            "timestamp": "2026-04-25 06:58:20,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11101
          },
          {
            "timestamp": "2026-04-25 06:58:20,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11102
          },
          {
            "timestamp": "2026-04-25 06:58:20,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11103
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11104
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11105
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11106
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11107
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11108
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11109
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11110
          },
          {
            "timestamp": "2026-04-25 06:58:20,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11111
          },
          {
            "timestamp": "2026-04-25 06:58:20,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11112
          },
          {
            "timestamp": "2026-04-25 06:58:20,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11113
          },
          {
            "timestamp": "2026-04-25 06:58:20,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11114
          },
          {
            "timestamp": "2026-04-25 06:58:20,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11115
          },
          {
            "timestamp": "2026-04-25 06:58:20,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11116
          },
          {
            "timestamp": "2026-04-25 06:58:20,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11117
          },
          {
            "timestamp": "2026-04-25 06:58:20,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11118
          },
          {
            "timestamp": "2026-04-25 06:58:20,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11119
          },
          {
            "timestamp": "2026-04-25 06:58:20,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11120
          },
          {
            "timestamp": "2026-04-25 06:58:20,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11121
          },
          {
            "timestamp": "2026-04-25 06:58:20,438",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11122
          },
          {
            "timestamp": "2026-04-25 06:58:20,438",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11123
          },
          {
            "timestamp": "2026-04-25 06:58:20,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11124
          },
          {
            "timestamp": "2026-04-25 06:58:20,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11125
          },
          {
            "timestamp": "2026-04-25 06:58:20,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11126
          },
          {
            "timestamp": "2026-04-25 06:58:20,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11127
          },
          {
            "timestamp": "2026-04-25 06:58:20,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11128
          },
          {
            "timestamp": "2026-04-25 06:58:20,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11129
          },
          {
            "timestamp": "2026-04-25 06:58:20,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11130
          },
          {
            "timestamp": "2026-04-25 06:58:20,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11131
          },
          {
            "timestamp": "2026-04-25 06:58:20,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11132
          },
          {
            "timestamp": "2026-04-25 06:58:20,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11133
          },
          {
            "timestamp": "2026-04-25 06:58:20,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11134
          },
          {
            "timestamp": "2026-04-25 06:58:20,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11135
          },
          {
            "timestamp": "2026-04-25 06:58:20,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11136
          },
          {
            "timestamp": "2026-04-25 06:58:20,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11137
          },
          {
            "timestamp": "2026-04-25 06:58:20,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11138
          },
          {
            "timestamp": "2026-04-25 06:58:20,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11139
          },
          {
            "timestamp": "2026-04-25 06:58:20,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11140
          },
          {
            "timestamp": "2026-04-25 06:58:20,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11141
          },
          {
            "timestamp": "2026-04-25 06:58:20,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11142
          },
          {
            "timestamp": "2026-04-25 06:58:20,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11143
          },
          {
            "timestamp": "2026-04-25 06:58:20,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11144
          },
          {
            "timestamp": "2026-04-25 06:58:20,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11145
          },
          {
            "timestamp": "2026-04-25 06:58:20,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11146
          },
          {
            "timestamp": "2026-04-25 06:58:20,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11147
          },
          {
            "timestamp": "2026-04-25 06:58:20,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11148
          },
          {
            "timestamp": "2026-04-25 06:58:20,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11149
          },
          {
            "timestamp": "2026-04-25 06:58:20,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11150
          },
          {
            "timestamp": "2026-04-25 06:58:20,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11151
          },
          {
            "timestamp": "2026-04-25 06:58:20,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11152
          },
          {
            "timestamp": "2026-04-25 06:58:20,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11153
          },
          {
            "timestamp": "2026-04-25 06:58:20,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11154
          },
          {
            "timestamp": "2026-04-25 06:58:20,844",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11155
          },
          {
            "timestamp": "2026-04-25 06:58:20,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11156
          },
          {
            "timestamp": "2026-04-25 06:58:20,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11157
          },
          {
            "timestamp": "2026-04-25 06:58:20,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11158
          },
          {
            "timestamp": "2026-04-25 06:58:20,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11159
          },
          {
            "timestamp": "2026-04-25 06:58:20,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11160
          },
          {
            "timestamp": "2026-04-25 06:58:20,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11161
          },
          {
            "timestamp": "2026-04-25 06:58:20,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11162
          },
          {
            "timestamp": "2026-04-25 06:58:20,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11163
          },
          {
            "timestamp": "2026-04-25 06:58:20,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11164
          },
          {
            "timestamp": "2026-04-25 06:58:20,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11165
          },
          {
            "timestamp": "2026-04-25 06:58:20,954",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11166
          },
          {
            "timestamp": "2026-04-25 06:58:20,954",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11167
          },
          {
            "timestamp": "2026-04-25 06:58:20,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11168
          },
          {
            "timestamp": "2026-04-25 06:58:20,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11169
          },
          {
            "timestamp": "2026-04-25 06:58:20,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11170
          },
          {
            "timestamp": "2026-04-25 06:58:20,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11171
          },
          {
            "timestamp": "2026-04-25 06:58:21,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11172
          },
          {
            "timestamp": "2026-04-25 06:58:21,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11173
          },
          {
            "timestamp": "2026-04-25 06:58:21,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11174
          },
          {
            "timestamp": "2026-04-25 06:58:21,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11175
          },
          {
            "timestamp": "2026-04-25 06:58:21,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11176
          },
          {
            "timestamp": "2026-04-25 06:58:21,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11177
          },
          {
            "timestamp": "2026-04-25 06:58:21,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11178
          },
          {
            "timestamp": "2026-04-25 06:58:21,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11179
          },
          {
            "timestamp": "2026-04-25 06:58:21,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11180
          },
          {
            "timestamp": "2026-04-25 06:58:21,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11181
          },
          {
            "timestamp": "2026-04-25 06:58:21,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11182
          },
          {
            "timestamp": "2026-04-25 06:58:21,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11183
          },
          {
            "timestamp": "2026-04-25 06:58:21,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11184
          },
          {
            "timestamp": "2026-04-25 06:58:21,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11185
          },
          {
            "timestamp": "2026-04-25 06:58:21,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11186
          },
          {
            "timestamp": "2026-04-25 06:58:21,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11187
          },
          {
            "timestamp": "2026-04-25 06:58:21,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11188
          },
          {
            "timestamp": "2026-04-25 06:58:21,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11189
          },
          {
            "timestamp": "2026-04-25 06:58:21,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11190
          },
          {
            "timestamp": "2026-04-25 06:58:21,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11191
          },
          {
            "timestamp": "2026-04-25 06:58:21,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11192
          },
          {
            "timestamp": "2026-04-25 06:58:21,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11193
          },
          {
            "timestamp": "2026-04-25 06:58:21,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11194
          },
          {
            "timestamp": "2026-04-25 06:58:21,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11195
          },
          {
            "timestamp": "2026-04-25 06:58:21,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11196
          },
          {
            "timestamp": "2026-04-25 06:58:21,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11197
          },
          {
            "timestamp": "2026-04-25 06:58:21,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11198
          },
          {
            "timestamp": "2026-04-25 06:58:21,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11199
          },
          {
            "timestamp": "2026-04-25 06:58:21,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11200
          },
          {
            "timestamp": "2026-04-25 06:58:21,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11201
          },
          {
            "timestamp": "2026-04-25 06:58:21,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11202
          },
          {
            "timestamp": "2026-04-25 06:58:21,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11203
          },
          {
            "timestamp": "2026-04-25 06:58:21,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11204
          },
          {
            "timestamp": "2026-04-25 06:58:21,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11205
          },
          {
            "timestamp": "2026-04-25 06:58:21,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11206
          },
          {
            "timestamp": "2026-04-25 06:58:21,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11207
          },
          {
            "timestamp": "2026-04-25 06:58:21,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11208
          },
          {
            "timestamp": "2026-04-25 06:58:21,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11209
          },
          {
            "timestamp": "2026-04-25 06:58:21,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11210
          },
          {
            "timestamp": "2026-04-25 06:58:21,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11211
          },
          {
            "timestamp": "2026-04-25 06:58:21,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11212
          },
          {
            "timestamp": "2026-04-25 06:58:21,469",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11213
          },
          {
            "timestamp": "2026-04-25 06:58:21,469",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11214
          },
          {
            "timestamp": "2026-04-25 06:58:21,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11215
          },
          {
            "timestamp": "2026-04-25 06:58:21,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11216
          },
          {
            "timestamp": "2026-04-25 06:58:21,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11217
          },
          {
            "timestamp": "2026-04-25 06:58:21,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11218
          },
          {
            "timestamp": "2026-04-25 06:58:21,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11219
          },
          {
            "timestamp": "2026-04-25 06:58:21,594",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11220
          },
          {
            "timestamp": "2026-04-25 06:58:21,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11221
          },
          {
            "timestamp": "2026-04-25 06:58:21,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11222
          },
          {
            "timestamp": "2026-04-25 06:58:21,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11223
          },
          {
            "timestamp": "2026-04-25 06:58:21,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11224
          },
          {
            "timestamp": "2026-04-25 06:58:21,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11225
          },
          {
            "timestamp": "2026-04-25 06:58:21,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11226
          },
          {
            "timestamp": "2026-04-25 06:58:21,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11227
          },
          {
            "timestamp": "2026-04-25 06:58:21,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11228
          },
          {
            "timestamp": "2026-04-25 06:58:21,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11229
          },
          {
            "timestamp": "2026-04-25 06:58:21,719",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11230
          },
          {
            "timestamp": "2026-04-25 06:58:21,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11231
          },
          {
            "timestamp": "2026-04-25 06:58:21,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11232
          },
          {
            "timestamp": "2026-04-25 06:58:21,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11233
          },
          {
            "timestamp": "2026-04-25 06:58:21,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11234
          },
          {
            "timestamp": "2026-04-25 06:58:21,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11235
          },
          {
            "timestamp": "2026-04-25 06:58:21,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11236
          },
          {
            "timestamp": "2026-04-25 06:58:21,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11237
          },
          {
            "timestamp": "2026-04-25 06:58:21,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11238
          },
          {
            "timestamp": "2026-04-25 06:58:21,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11239
          },
          {
            "timestamp": "2026-04-25 06:58:21,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11240
          },
          {
            "timestamp": "2026-04-25 06:58:21,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11241
          },
          {
            "timestamp": "2026-04-25 06:58:21,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11242
          },
          {
            "timestamp": "2026-04-25 06:58:21,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11243
          },
          {
            "timestamp": "2026-04-25 06:58:21,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11244
          },
          {
            "timestamp": "2026-04-25 06:58:21,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11245
          },
          {
            "timestamp": "2026-04-25 06:58:21,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11246
          },
          {
            "timestamp": "2026-04-25 06:58:21,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11247
          },
          {
            "timestamp": "2026-04-25 06:58:21,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11248
          },
          {
            "timestamp": "2026-04-25 06:58:21,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11249
          },
          {
            "timestamp": "2026-04-25 06:58:21,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11250
          },
          {
            "timestamp": "2026-04-25 06:58:21,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11251
          },
          {
            "timestamp": "2026-04-25 06:58:21,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11252
          },
          {
            "timestamp": "2026-04-25 06:58:21,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11253
          },
          {
            "timestamp": "2026-04-25 06:58:21,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11254
          },
          {
            "timestamp": "2026-04-25 06:58:21,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11255
          },
          {
            "timestamp": "2026-04-25 06:58:21,985",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11256
          },
          {
            "timestamp": "2026-04-25 06:58:21,985",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11257
          },
          {
            "timestamp": "2026-04-25 06:58:22,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11258
          },
          {
            "timestamp": "2026-04-25 06:58:22,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11259
          },
          {
            "timestamp": "2026-04-25 06:58:22,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11260
          },
          {
            "timestamp": "2026-04-25 06:58:22,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11261
          },
          {
            "timestamp": "2026-04-25 06:58:22,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11262
          },
          {
            "timestamp": "2026-04-25 06:58:22,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11263
          },
          {
            "timestamp": "2026-04-25 06:58:22,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11264
          },
          {
            "timestamp": "2026-04-25 06:58:22,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11265
          },
          {
            "timestamp": "2026-04-25 06:58:22,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11266
          },
          {
            "timestamp": "2026-04-25 06:58:22,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11267
          },
          {
            "timestamp": "2026-04-25 06:58:22,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11268
          },
          {
            "timestamp": "2026-04-25 06:58:22,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11269
          },
          {
            "timestamp": "2026-04-25 06:58:22,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11270
          },
          {
            "timestamp": "2026-04-25 06:58:22,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11271
          },
          {
            "timestamp": "2026-04-25 06:58:22,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11272
          },
          {
            "timestamp": "2026-04-25 06:58:22,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11273
          },
          {
            "timestamp": "2026-04-25 06:58:22,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11274
          },
          {
            "timestamp": "2026-04-25 06:58:22,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11275
          },
          {
            "timestamp": "2026-04-25 06:58:22,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11276
          },
          {
            "timestamp": "2026-04-25 06:58:22,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11277
          },
          {
            "timestamp": "2026-04-25 06:58:22,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11278
          },
          {
            "timestamp": "2026-04-25 06:58:22,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11279
          },
          {
            "timestamp": "2026-04-25 06:58:22,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11280
          },
          {
            "timestamp": "2026-04-25 06:58:22,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11281
          },
          {
            "timestamp": "2026-04-25 06:58:22,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11282
          },
          {
            "timestamp": "2026-04-25 06:58:22,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11283
          },
          {
            "timestamp": "2026-04-25 06:58:22,282",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11284
          },
          {
            "timestamp": "2026-04-25 06:58:22,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11285
          },
          {
            "timestamp": "2026-04-25 06:58:22,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11286
          },
          {
            "timestamp": "2026-04-25 06:58:22,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11287
          },
          {
            "timestamp": "2026-04-25 06:58:22,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11288
          },
          {
            "timestamp": "2026-04-25 06:58:22,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11289
          },
          {
            "timestamp": "2026-04-25 06:58:22,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11290
          },
          {
            "timestamp": "2026-04-25 06:58:22,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11291
          },
          {
            "timestamp": "2026-04-25 06:58:22,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11292
          },
          {
            "timestamp": "2026-04-25 06:58:22,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11293
          },
          {
            "timestamp": "2026-04-25 06:58:22,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11294
          },
          {
            "timestamp": "2026-04-25 06:58:22,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11295
          },
          {
            "timestamp": "2026-04-25 06:58:22,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11296
          },
          {
            "timestamp": "2026-04-25 06:58:22,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11297
          },
          {
            "timestamp": "2026-04-25 06:58:22,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11298
          },
          {
            "timestamp": "2026-04-25 06:58:22,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11299
          },
          {
            "timestamp": "2026-04-25 06:58:22,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11300
          },
          {
            "timestamp": "2026-04-25 06:58:22,532",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11301
          },
          {
            "timestamp": "2026-04-25 06:58:22,532",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11302
          },
          {
            "timestamp": "2026-04-25 06:58:22,547",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11303
          },
          {
            "timestamp": "2026-04-25 06:58:22,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11304
          },
          {
            "timestamp": "2026-04-25 06:58:22,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11305
          },
          {
            "timestamp": "2026-04-25 06:58:22,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11306
          },
          {
            "timestamp": "2026-04-25 06:58:22,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11307
          },
          {
            "timestamp": "2026-04-25 06:58:22,610",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11308
          },
          {
            "timestamp": "2026-04-25 06:58:22,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11309
          },
          {
            "timestamp": "2026-04-25 06:58:22,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11310
          },
          {
            "timestamp": "2026-04-25 06:58:22,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11311
          },
          {
            "timestamp": "2026-04-25 06:58:22,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11312
          },
          {
            "timestamp": "2026-04-25 06:58:22,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11313
          },
          {
            "timestamp": "2026-04-25 06:58:22,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11314
          },
          {
            "timestamp": "2026-04-25 06:58:22,672",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11315
          },
          {
            "timestamp": "2026-04-25 06:58:22,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11316
          },
          {
            "timestamp": "2026-04-25 06:58:22,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11317
          },
          {
            "timestamp": "2026-04-25 06:58:22,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11318
          },
          {
            "timestamp": "2026-04-25 06:58:22,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11319
          },
          {
            "timestamp": "2026-04-25 06:58:22,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11320
          },
          {
            "timestamp": "2026-04-25 06:58:22,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11321
          },
          {
            "timestamp": "2026-04-25 06:58:22,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11322
          },
          {
            "timestamp": "2026-04-25 06:58:22,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11323
          },
          {
            "timestamp": "2026-04-25 06:58:22,797",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11324
          },
          {
            "timestamp": "2026-04-25 06:58:22,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11325
          },
          {
            "timestamp": "2026-04-25 06:58:22,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11326
          },
          {
            "timestamp": "2026-04-25 06:58:22,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11327
          },
          {
            "timestamp": "2026-04-25 06:58:22,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11328
          },
          {
            "timestamp": "2026-04-25 06:58:22,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11329
          },
          {
            "timestamp": "2026-04-25 06:58:22,860",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11330
          },
          {
            "timestamp": "2026-04-25 06:58:22,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11331
          },
          {
            "timestamp": "2026-04-25 06:58:22,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11332
          },
          {
            "timestamp": "2026-04-25 06:58:22,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11333
          },
          {
            "timestamp": "2026-04-25 06:58:22,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11334
          },
          {
            "timestamp": "2026-04-25 06:58:22,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11335
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11336
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11337
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11338
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11339
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x0788142c",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "K32EnumProcesses",
            "status": true,
            "return": "0x00000001",
            "arguments": [],
            "repeated": 0,
            "id": 11340
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06697000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 11341
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": false,
            "return": "0xffffffffc0000004",
            "pretty_return": "INFO_LENGTH_MISMATCH",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 11342
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x0507b754",
            "parentcaller": "0x0507b027",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x066b7000"
              },
              {
                "name": "RegionSize",
                "value": "0x00034000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 11343
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x078814eb",
            "parentcaller": "0x0507b754",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "5",
                "pretty_value": "FILE_OVERWRITE_IF"
              }
            ],
            "repeated": 0,
            "id": 11344
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x0288a3a6",
            "parentcaller": "0x0507b764",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 11345
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11346
          },
          {
            "timestamp": "2026-04-25 06:58:22,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11347
          },
          {
            "timestamp": "2026-04-25 06:58:22,985",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11348
          },
          {
            "timestamp": "2026-04-25 06:58:22,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11349
          },
          {
            "timestamp": "2026-04-25 06:58:22,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11350
          },
          {
            "timestamp": "2026-04-25 06:58:22,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11351
          },
          {
            "timestamp": "2026-04-25 06:58:22,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11352
          },
          {
            "timestamp": "2026-04-25 06:58:22,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11353
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11354
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11355
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11356
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11357
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11358
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11359
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11360
          },
          {
            "timestamp": "2026-04-25 06:58:23,047",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11361
          },
          {
            "timestamp": "2026-04-25 06:58:23,110",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11362
          },
          {
            "timestamp": "2026-04-25 06:58:23,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11363
          },
          {
            "timestamp": "2026-04-25 06:58:23,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11364
          },
          {
            "timestamp": "2026-04-25 06:58:23,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11365
          },
          {
            "timestamp": "2026-04-25 06:58:23,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11366
          },
          {
            "timestamp": "2026-04-25 06:58:23,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11367
          },
          {
            "timestamp": "2026-04-25 06:58:23,172",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11368
          },
          {
            "timestamp": "2026-04-25 06:58:23,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11369
          },
          {
            "timestamp": "2026-04-25 06:58:23,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11370
          },
          {
            "timestamp": "2026-04-25 06:58:23,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11371
          },
          {
            "timestamp": "2026-04-25 06:58:23,172",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11372
          },
          {
            "timestamp": "2026-04-25 06:58:23,172",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11373
          },
          {
            "timestamp": "2026-04-25 06:58:23,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11374
          },
          {
            "timestamp": "2026-04-25 06:58:23,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11375
          },
          {
            "timestamp": "2026-04-25 06:58:23,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 11376
          },
          {
            "timestamp": "2026-04-25 06:58:23,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11377
          },
          {
            "timestamp": "2026-04-25 06:58:23,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11378
          },
          {
            "timestamp": "2026-04-25 06:58:23,297",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11379
          },
          {
            "timestamp": "2026-04-25 06:58:23,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11380
          },
          {
            "timestamp": "2026-04-25 06:58:23,297",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11381
          },
          {
            "timestamp": "2026-04-25 06:58:23,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11382
          },
          {
            "timestamp": "2026-04-25 06:58:23,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11383
          },
          {
            "timestamp": "2026-04-25 06:58:23,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11384
          },
          {
            "timestamp": "2026-04-25 06:58:23,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11385
          },
          {
            "timestamp": "2026-04-25 06:58:23,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11386
          },
          {
            "timestamp": "2026-04-25 06:58:23,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11387
          },
          {
            "timestamp": "2026-04-25 06:58:23,360",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11388
          },
          {
            "timestamp": "2026-04-25 06:58:23,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11389
          },
          {
            "timestamp": "2026-04-25 06:58:23,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11390
          },
          {
            "timestamp": "2026-04-25 06:58:23,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11391
          },
          {
            "timestamp": "2026-04-25 06:58:23,422",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11392
          },
          {
            "timestamp": "2026-04-25 06:58:23,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11393
          },
          {
            "timestamp": "2026-04-25 06:58:23,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11394
          },
          {
            "timestamp": "2026-04-25 06:58:23,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11395
          },
          {
            "timestamp": "2026-04-25 06:58:23,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11396
          },
          {
            "timestamp": "2026-04-25 06:58:23,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11397
          },
          {
            "timestamp": "2026-04-25 06:58:23,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11398
          },
          {
            "timestamp": "2026-04-25 06:58:23,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11399
          },
          {
            "timestamp": "2026-04-25 06:58:23,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11400
          },
          {
            "timestamp": "2026-04-25 06:58:23,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11401
          },
          {
            "timestamp": "2026-04-25 06:58:23,547",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11402
          },
          {
            "timestamp": "2026-04-25 06:58:23,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11403
          },
          {
            "timestamp": "2026-04-25 06:58:23,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11404
          },
          {
            "timestamp": "2026-04-25 06:58:23,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11405
          },
          {
            "timestamp": "2026-04-25 06:58:23,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11406
          },
          {
            "timestamp": "2026-04-25 06:58:23,563",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11407
          },
          {
            "timestamp": "2026-04-25 06:58:23,563",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11408
          },
          {
            "timestamp": "2026-04-25 06:58:23,610",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11409
          },
          {
            "timestamp": "2026-04-25 06:58:23,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11410
          },
          {
            "timestamp": "2026-04-25 06:58:23,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11411
          },
          {
            "timestamp": "2026-04-25 06:58:23,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11412
          },
          {
            "timestamp": "2026-04-25 06:58:23,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11413
          },
          {
            "timestamp": "2026-04-25 06:58:23,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11414
          },
          {
            "timestamp": "2026-04-25 06:58:23,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11415
          },
          {
            "timestamp": "2026-04-25 06:58:23,672",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11416
          },
          {
            "timestamp": "2026-04-25 06:58:23,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11417
          },
          {
            "timestamp": "2026-04-25 06:58:23,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11418
          },
          {
            "timestamp": "2026-04-25 06:58:23,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11419
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11420
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11421
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11422
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11423
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11424
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11425
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11426
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x066eb000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 11427
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11428
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11429
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11430
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11431
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 11432
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11433
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000634",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1588"
              }
            ],
            "repeated": 0,
            "id": 11434
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 11435
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 11436
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 11437
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11438
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000634"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 11439
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 11440
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11441
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11442
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11443
          },
          {
            "timestamp": "2026-04-25 06:58:23,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11444
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 11445
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006bc"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00pu\\x00T\\x19\\x00\\x00\\xe0\\x1f\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "8160"
              }
            ],
            "repeated": 0,
            "id": 11446
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 11447
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x0288afea",
            "parentcaller": "0x0836e834",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00ce8000"
              },
              {
                "name": "RegionSize",
                "value": "0x0001d000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 11448
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 11449
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 11450
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 11451
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 11452
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1588"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 11453
          },
          {
            "timestamp": "2026-04-25 06:58:23,751",
            "thread_id": "8160",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              }
            ],
            "repeated": 0,
            "id": 11454
          },
          {
            "timestamp": "2026-04-25 06:58:23,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11455
          },
          {
            "timestamp": "2026-04-25 06:58:23,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11456
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 11457
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "800",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1588"
              }
            ],
            "repeated": 0,
            "id": 11458
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "800",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 11459
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "800",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 11460
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 4,
            "id": 11461
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 11462
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "800",
            "caller": "0x050759c3",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 11463
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11464
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11465
          },
          {
            "timestamp": "2026-04-25 06:58:23,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11466
          },
          {
            "timestamp": "2026-04-25 06:58:23,797",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11467
          },
          {
            "timestamp": "2026-04-25 06:58:23,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11468
          },
          {
            "timestamp": "2026-04-25 06:58:23,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11469
          },
          {
            "timestamp": "2026-04-25 06:58:23,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11470
          },
          {
            "timestamp": "2026-04-25 06:58:23,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11471
          },
          {
            "timestamp": "2026-04-25 06:58:23,860",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11472
          },
          {
            "timestamp": "2026-04-25 06:58:23,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11473
          },
          {
            "timestamp": "2026-04-25 06:58:23,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11474
          },
          {
            "timestamp": "2026-04-25 06:58:23,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11475
          },
          {
            "timestamp": "2026-04-25 06:58:23,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11476
          },
          {
            "timestamp": "2026-04-25 06:58:23,922",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11477
          },
          {
            "timestamp": "2026-04-25 06:58:23,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11478
          },
          {
            "timestamp": "2026-04-25 06:58:23,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11479
          },
          {
            "timestamp": "2026-04-25 06:58:23,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11480
          },
          {
            "timestamp": "2026-04-25 06:58:23,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11481
          },
          {
            "timestamp": "2026-04-25 06:58:23,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11482
          },
          {
            "timestamp": "2026-04-25 06:58:23,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11483
          },
          {
            "timestamp": "2026-04-25 06:58:23,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11484
          },
          {
            "timestamp": "2026-04-25 06:58:23,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11485
          },
          {
            "timestamp": "2026-04-25 06:58:23,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11486
          },
          {
            "timestamp": "2026-04-25 06:58:24,047",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11487
          },
          {
            "timestamp": "2026-04-25 06:58:24,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11488
          },
          {
            "timestamp": "2026-04-25 06:58:24,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11489
          },
          {
            "timestamp": "2026-04-25 06:58:24,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11490
          },
          {
            "timestamp": "2026-04-25 06:58:24,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11491
          },
          {
            "timestamp": "2026-04-25 06:58:24,079",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11492
          },
          {
            "timestamp": "2026-04-25 06:58:24,079",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11493
          },
          {
            "timestamp": "2026-04-25 06:58:24,110",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11494
          },
          {
            "timestamp": "2026-04-25 06:58:24,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11495
          },
          {
            "timestamp": "2026-04-25 06:58:24,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11496
          },
          {
            "timestamp": "2026-04-25 06:58:24,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11497
          },
          {
            "timestamp": "2026-04-25 06:58:24,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11498
          },
          {
            "timestamp": "2026-04-25 06:58:24,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11499
          },
          {
            "timestamp": "2026-04-25 06:58:24,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11500
          },
          {
            "timestamp": "2026-04-25 06:58:24,172",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11501
          },
          {
            "timestamp": "2026-04-25 06:58:24,172",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11502
          },
          {
            "timestamp": "2026-04-25 06:58:24,235",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11503
          },
          {
            "timestamp": "2026-04-25 06:58:24,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11504
          },
          {
            "timestamp": "2026-04-25 06:58:24,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11505
          },
          {
            "timestamp": "2026-04-25 06:58:24,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11506
          },
          {
            "timestamp": "2026-04-25 06:58:24,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11507
          },
          {
            "timestamp": "2026-04-25 06:58:24,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11508
          },
          {
            "timestamp": "2026-04-25 06:58:24,297",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11509
          },
          {
            "timestamp": "2026-04-25 06:58:24,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11510
          },
          {
            "timestamp": "2026-04-25 06:58:24,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11511
          },
          {
            "timestamp": "2026-04-25 06:58:24,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11512
          },
          {
            "timestamp": "2026-04-25 06:58:24,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11513
          },
          {
            "timestamp": "2026-04-25 06:58:24,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11514
          },
          {
            "timestamp": "2026-04-25 06:58:24,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11515
          },
          {
            "timestamp": "2026-04-25 06:58:24,360",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11516
          },
          {
            "timestamp": "2026-04-25 06:58:24,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11517
          },
          {
            "timestamp": "2026-04-25 06:58:24,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11518
          },
          {
            "timestamp": "2026-04-25 06:58:24,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11519
          },
          {
            "timestamp": "2026-04-25 06:58:24,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11520
          },
          {
            "timestamp": "2026-04-25 06:58:24,422",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11521
          },
          {
            "timestamp": "2026-04-25 06:58:24,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11522
          },
          {
            "timestamp": "2026-04-25 06:58:24,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11523
          },
          {
            "timestamp": "2026-04-25 06:58:24,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11524
          },
          {
            "timestamp": "2026-04-25 06:58:24,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11525
          },
          {
            "timestamp": "2026-04-25 06:58:24,485",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11526
          },
          {
            "timestamp": "2026-04-25 06:58:24,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11527
          },
          {
            "timestamp": "2026-04-25 06:58:24,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11528
          },
          {
            "timestamp": "2026-04-25 06:58:24,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11529
          },
          {
            "timestamp": "2026-04-25 06:58:24,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11530
          },
          {
            "timestamp": "2026-04-25 06:58:24,547",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11531
          },
          {
            "timestamp": "2026-04-25 06:58:24,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11532
          },
          {
            "timestamp": "2026-04-25 06:58:24,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11533
          },
          {
            "timestamp": "2026-04-25 06:58:24,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11534
          },
          {
            "timestamp": "2026-04-25 06:58:24,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11535
          },
          {
            "timestamp": "2026-04-25 06:58:24,594",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11536
          },
          {
            "timestamp": "2026-04-25 06:58:24,594",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11537
          },
          {
            "timestamp": "2026-04-25 06:58:24,610",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11538
          },
          {
            "timestamp": "2026-04-25 06:58:24,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11539
          },
          {
            "timestamp": "2026-04-25 06:58:24,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11540
          },
          {
            "timestamp": "2026-04-25 06:58:24,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11541
          },
          {
            "timestamp": "2026-04-25 06:58:24,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11542
          },
          {
            "timestamp": "2026-04-25 06:58:24,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11543
          },
          {
            "timestamp": "2026-04-25 06:58:24,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11544
          },
          {
            "timestamp": "2026-04-25 06:58:24,672",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11545
          },
          {
            "timestamp": "2026-04-25 06:58:24,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11546
          },
          {
            "timestamp": "2026-04-25 06:58:24,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11547
          },
          {
            "timestamp": "2026-04-25 06:58:24,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11548
          },
          {
            "timestamp": "2026-04-25 06:58:24,735",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11549
          },
          {
            "timestamp": "2026-04-25 06:58:24,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11550
          },
          {
            "timestamp": "2026-04-25 06:58:24,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11551
          },
          {
            "timestamp": "2026-04-25 06:58:24,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11552
          },
          {
            "timestamp": "2026-04-25 06:58:24,797",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11553
          },
          {
            "timestamp": "2026-04-25 06:58:24,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11554
          },
          {
            "timestamp": "2026-04-25 06:58:24,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11555
          },
          {
            "timestamp": "2026-04-25 06:58:24,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11556
          },
          {
            "timestamp": "2026-04-25 06:58:24,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11557
          },
          {
            "timestamp": "2026-04-25 06:58:24,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11558
          },
          {
            "timestamp": "2026-04-25 06:58:24,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11559
          },
          {
            "timestamp": "2026-04-25 06:58:24,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11560
          },
          {
            "timestamp": "2026-04-25 06:58:24,860",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11561
          },
          {
            "timestamp": "2026-04-25 06:58:24,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11562
          },
          {
            "timestamp": "2026-04-25 06:58:24,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11563
          },
          {
            "timestamp": "2026-04-25 06:58:24,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11564
          },
          {
            "timestamp": "2026-04-25 06:58:24,922",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11565
          },
          {
            "timestamp": "2026-04-25 06:58:24,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11566
          },
          {
            "timestamp": "2026-04-25 06:58:24,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11567
          },
          {
            "timestamp": "2026-04-25 06:58:24,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11568
          },
          {
            "timestamp": "2026-04-25 06:58:24,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11569
          },
          {
            "timestamp": "2026-04-25 06:58:24,985",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11570
          },
          {
            "timestamp": "2026-04-25 06:58:24,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11571
          },
          {
            "timestamp": "2026-04-25 06:58:24,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11572
          },
          {
            "timestamp": "2026-04-25 06:58:24,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11573
          },
          {
            "timestamp": "2026-04-25 06:58:24,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11574
          },
          {
            "timestamp": "2026-04-25 06:58:25,047",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11575
          },
          {
            "timestamp": "2026-04-25 06:58:25,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11576
          },
          {
            "timestamp": "2026-04-25 06:58:25,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11577
          },
          {
            "timestamp": "2026-04-25 06:58:25,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11578
          },
          {
            "timestamp": "2026-04-25 06:58:25,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11579
          },
          {
            "timestamp": "2026-04-25 06:58:25,110",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11580
          },
          {
            "timestamp": "2026-04-25 06:58:25,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11581
          },
          {
            "timestamp": "2026-04-25 06:58:25,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11582
          },
          {
            "timestamp": "2026-04-25 06:58:25,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11583
          },
          {
            "timestamp": "2026-04-25 06:58:25,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11584
          },
          {
            "timestamp": "2026-04-25 06:58:25,110",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11585
          },
          {
            "timestamp": "2026-04-25 06:58:25,110",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11586
          },
          {
            "timestamp": "2026-04-25 06:58:25,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11587
          },
          {
            "timestamp": "2026-04-25 06:58:25,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11588
          },
          {
            "timestamp": "2026-04-25 06:58:25,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11589
          },
          {
            "timestamp": "2026-04-25 06:58:25,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11590
          },
          {
            "timestamp": "2026-04-25 06:58:25,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11591
          },
          {
            "timestamp": "2026-04-25 06:58:25,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11592
          },
          {
            "timestamp": "2026-04-25 06:58:25,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11593
          },
          {
            "timestamp": "2026-04-25 06:58:25,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11594
          },
          {
            "timestamp": "2026-04-25 06:58:25,251",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11595
          },
          {
            "timestamp": "2026-04-25 06:58:25,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "46"
              }
            ],
            "repeated": 0,
            "id": 11596
          },
          {
            "timestamp": "2026-04-25 06:58:25,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11597
          },
          {
            "timestamp": "2026-04-25 06:58:25,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11598
          },
          {
            "timestamp": "2026-04-25 06:58:25,313",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11599
          },
          {
            "timestamp": "2026-04-25 06:58:25,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11600
          },
          {
            "timestamp": "2026-04-25 06:58:25,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11601
          },
          {
            "timestamp": "2026-04-25 06:58:25,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11602
          },
          {
            "timestamp": "2026-04-25 06:58:25,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11603
          },
          {
            "timestamp": "2026-04-25 06:58:25,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11604
          },
          {
            "timestamp": "2026-04-25 06:58:25,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11605
          },
          {
            "timestamp": "2026-04-25 06:58:25,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11606
          },
          {
            "timestamp": "2026-04-25 06:58:25,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11607
          },
          {
            "timestamp": "2026-04-25 06:58:25,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11608
          },
          {
            "timestamp": "2026-04-25 06:58:25,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11609
          },
          {
            "timestamp": "2026-04-25 06:58:25,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11610
          },
          {
            "timestamp": "2026-04-25 06:58:25,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11611
          },
          {
            "timestamp": "2026-04-25 06:58:25,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11612
          },
          {
            "timestamp": "2026-04-25 06:58:25,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11613
          },
          {
            "timestamp": "2026-04-25 06:58:25,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11614
          },
          {
            "timestamp": "2026-04-25 06:58:25,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11615
          },
          {
            "timestamp": "2026-04-25 06:58:25,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11616
          },
          {
            "timestamp": "2026-04-25 06:58:25,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11617
          },
          {
            "timestamp": "2026-04-25 06:58:25,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11618
          },
          {
            "timestamp": "2026-04-25 06:58:25,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11619
          },
          {
            "timestamp": "2026-04-25 06:58:25,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11620
          },
          {
            "timestamp": "2026-04-25 06:58:25,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11621
          },
          {
            "timestamp": "2026-04-25 06:58:25,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11622
          },
          {
            "timestamp": "2026-04-25 06:58:25,563",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11623
          },
          {
            "timestamp": "2026-04-25 06:58:25,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11624
          },
          {
            "timestamp": "2026-04-25 06:58:25,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11625
          },
          {
            "timestamp": "2026-04-25 06:58:25,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11626
          },
          {
            "timestamp": "2026-04-25 06:58:25,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11627
          },
          {
            "timestamp": "2026-04-25 06:58:25,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11628
          },
          {
            "timestamp": "2026-04-25 06:58:25,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11629
          },
          {
            "timestamp": "2026-04-25 06:58:25,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11630
          },
          {
            "timestamp": "2026-04-25 06:58:25,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11631
          },
          {
            "timestamp": "2026-04-25 06:58:25,626",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11632
          },
          {
            "timestamp": "2026-04-25 06:58:25,626",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11633
          },
          {
            "timestamp": "2026-04-25 06:58:25,688",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11634
          },
          {
            "timestamp": "2026-04-25 06:58:25,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11635
          },
          {
            "timestamp": "2026-04-25 06:58:25,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11636
          },
          {
            "timestamp": "2026-04-25 06:58:25,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11637
          },
          {
            "timestamp": "2026-04-25 06:58:25,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11638
          },
          {
            "timestamp": "2026-04-25 06:58:25,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11639
          },
          {
            "timestamp": "2026-04-25 06:58:25,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11640
          },
          {
            "timestamp": "2026-04-25 06:58:25,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11641
          },
          {
            "timestamp": "2026-04-25 06:58:25,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11642
          },
          {
            "timestamp": "2026-04-25 06:58:25,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11643
          },
          {
            "timestamp": "2026-04-25 06:58:25,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11644
          },
          {
            "timestamp": "2026-04-25 06:58:25,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11645
          },
          {
            "timestamp": "2026-04-25 06:58:25,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11646
          },
          {
            "timestamp": "2026-04-25 06:58:25,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11647
          },
          {
            "timestamp": "2026-04-25 06:58:25,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11648
          },
          {
            "timestamp": "2026-04-25 06:58:25,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11649
          },
          {
            "timestamp": "2026-04-25 06:58:25,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11650
          },
          {
            "timestamp": "2026-04-25 06:58:25,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11651
          },
          {
            "timestamp": "2026-04-25 06:58:25,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11652
          },
          {
            "timestamp": "2026-04-25 06:58:25,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11653
          },
          {
            "timestamp": "2026-04-25 06:58:25,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11654
          },
          {
            "timestamp": "2026-04-25 06:58:25,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11655
          },
          {
            "timestamp": "2026-04-25 06:58:25,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11656
          },
          {
            "timestamp": "2026-04-25 06:58:25,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11657
          },
          {
            "timestamp": "2026-04-25 06:58:25,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11658
          },
          {
            "timestamp": "2026-04-25 06:58:26,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11659
          },
          {
            "timestamp": "2026-04-25 06:58:26,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11660
          },
          {
            "timestamp": "2026-04-25 06:58:26,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11661
          },
          {
            "timestamp": "2026-04-25 06:58:26,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11662
          },
          {
            "timestamp": "2026-04-25 06:58:26,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11663
          },
          {
            "timestamp": "2026-04-25 06:58:26,063",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11664
          },
          {
            "timestamp": "2026-04-25 06:58:26,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11665
          },
          {
            "timestamp": "2026-04-25 06:58:26,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11666
          },
          {
            "timestamp": "2026-04-25 06:58:26,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11667
          },
          {
            "timestamp": "2026-04-25 06:58:26,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11668
          },
          {
            "timestamp": "2026-04-25 06:58:26,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11669
          },
          {
            "timestamp": "2026-04-25 06:58:26,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11670
          },
          {
            "timestamp": "2026-04-25 06:58:26,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11671
          },
          {
            "timestamp": "2026-04-25 06:58:26,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11672
          },
          {
            "timestamp": "2026-04-25 06:58:26,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11673
          },
          {
            "timestamp": "2026-04-25 06:58:26,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11674
          },
          {
            "timestamp": "2026-04-25 06:58:26,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11675
          },
          {
            "timestamp": "2026-04-25 06:58:26,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11676
          },
          {
            "timestamp": "2026-04-25 06:58:26,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11677
          },
          {
            "timestamp": "2026-04-25 06:58:26,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11678
          },
          {
            "timestamp": "2026-04-25 06:58:26,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11679
          },
          {
            "timestamp": "2026-04-25 06:58:26,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11680
          },
          {
            "timestamp": "2026-04-25 06:58:26,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11681
          },
          {
            "timestamp": "2026-04-25 06:58:26,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11682
          },
          {
            "timestamp": "2026-04-25 06:58:26,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11683
          },
          {
            "timestamp": "2026-04-25 06:58:26,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11684
          },
          {
            "timestamp": "2026-04-25 06:58:26,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11685
          },
          {
            "timestamp": "2026-04-25 06:58:26,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11686
          },
          {
            "timestamp": "2026-04-25 06:58:26,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11687
          },
          {
            "timestamp": "2026-04-25 06:58:26,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11688
          },
          {
            "timestamp": "2026-04-25 06:58:26,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11689
          },
          {
            "timestamp": "2026-04-25 06:58:26,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11690
          },
          {
            "timestamp": "2026-04-25 06:58:26,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11691
          },
          {
            "timestamp": "2026-04-25 06:58:26,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11692
          },
          {
            "timestamp": "2026-04-25 06:58:26,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11693
          },
          {
            "timestamp": "2026-04-25 06:58:26,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11694
          },
          {
            "timestamp": "2026-04-25 06:58:26,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11695
          },
          {
            "timestamp": "2026-04-25 06:58:26,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11696
          },
          {
            "timestamp": "2026-04-25 06:58:26,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11697
          },
          {
            "timestamp": "2026-04-25 06:58:26,438",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11698
          },
          {
            "timestamp": "2026-04-25 06:58:26,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11699
          },
          {
            "timestamp": "2026-04-25 06:58:26,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11700
          },
          {
            "timestamp": "2026-04-25 06:58:26,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11701
          },
          {
            "timestamp": "2026-04-25 06:58:26,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11702
          },
          {
            "timestamp": "2026-04-25 06:58:26,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11703
          },
          {
            "timestamp": "2026-04-25 06:58:26,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11704
          },
          {
            "timestamp": "2026-04-25 06:58:26,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11705
          },
          {
            "timestamp": "2026-04-25 06:58:26,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11706
          },
          {
            "timestamp": "2026-04-25 06:58:26,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11707
          },
          {
            "timestamp": "2026-04-25 06:58:26,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11708
          },
          {
            "timestamp": "2026-04-25 06:58:26,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11709
          },
          {
            "timestamp": "2026-04-25 06:58:26,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11710
          },
          {
            "timestamp": "2026-04-25 06:58:26,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11711
          },
          {
            "timestamp": "2026-04-25 06:58:26,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11712
          },
          {
            "timestamp": "2026-04-25 06:58:26,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11713
          },
          {
            "timestamp": "2026-04-25 06:58:26,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11714
          },
          {
            "timestamp": "2026-04-25 06:58:26,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11715
          },
          {
            "timestamp": "2026-04-25 06:58:26,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11716
          },
          {
            "timestamp": "2026-04-25 06:58:26,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11717
          },
          {
            "timestamp": "2026-04-25 06:58:26,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11718
          },
          {
            "timestamp": "2026-04-25 06:58:26,751",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11719
          },
          {
            "timestamp": "2026-04-25 06:58:26,751",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11720
          },
          {
            "timestamp": "2026-04-25 06:58:26,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11721
          },
          {
            "timestamp": "2026-04-25 06:58:26,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11722
          },
          {
            "timestamp": "2026-04-25 06:58:26,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11723
          },
          {
            "timestamp": "2026-04-25 06:58:26,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11724
          },
          {
            "timestamp": "2026-04-25 06:58:26,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11725
          },
          {
            "timestamp": "2026-04-25 06:58:26,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11726
          },
          {
            "timestamp": "2026-04-25 06:58:26,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11727
          },
          {
            "timestamp": "2026-04-25 06:58:26,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11728
          },
          {
            "timestamp": "2026-04-25 06:58:26,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11729
          },
          {
            "timestamp": "2026-04-25 06:58:26,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11730
          },
          {
            "timestamp": "2026-04-25 06:58:26,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11731
          },
          {
            "timestamp": "2026-04-25 06:58:26,876",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11732
          },
          {
            "timestamp": "2026-04-25 06:58:26,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11733
          },
          {
            "timestamp": "2026-04-25 06:58:26,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11734
          },
          {
            "timestamp": "2026-04-25 06:58:26,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11735
          },
          {
            "timestamp": "2026-04-25 06:58:26,938",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11736
          },
          {
            "timestamp": "2026-04-25 06:58:26,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11737
          },
          {
            "timestamp": "2026-04-25 06:58:26,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11738
          },
          {
            "timestamp": "2026-04-25 06:58:26,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11739
          },
          {
            "timestamp": "2026-04-25 06:58:26,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11740
          },
          {
            "timestamp": "2026-04-25 06:58:26,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11741
          },
          {
            "timestamp": "2026-04-25 06:58:27,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11742
          },
          {
            "timestamp": "2026-04-25 06:58:27,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11743
          },
          {
            "timestamp": "2026-04-25 06:58:27,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11744
          },
          {
            "timestamp": "2026-04-25 06:58:27,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11745
          },
          {
            "timestamp": "2026-04-25 06:58:27,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11746
          },
          {
            "timestamp": "2026-04-25 06:58:27,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11747
          },
          {
            "timestamp": "2026-04-25 06:58:27,063",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11748
          },
          {
            "timestamp": "2026-04-25 06:58:27,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11749
          },
          {
            "timestamp": "2026-04-25 06:58:27,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11750
          },
          {
            "timestamp": "2026-04-25 06:58:27,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11751
          },
          {
            "timestamp": "2026-04-25 06:58:27,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11752
          },
          {
            "timestamp": "2026-04-25 06:58:27,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11753
          },
          {
            "timestamp": "2026-04-25 06:58:27,126",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11754
          },
          {
            "timestamp": "2026-04-25 06:58:27,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11755
          },
          {
            "timestamp": "2026-04-25 06:58:27,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11756
          },
          {
            "timestamp": "2026-04-25 06:58:27,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11757
          },
          {
            "timestamp": "2026-04-25 06:58:27,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11758
          },
          {
            "timestamp": "2026-04-25 06:58:27,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11759
          },
          {
            "timestamp": "2026-04-25 06:58:27,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11760
          },
          {
            "timestamp": "2026-04-25 06:58:27,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11761
          },
          {
            "timestamp": "2026-04-25 06:58:27,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11762
          },
          {
            "timestamp": "2026-04-25 06:58:27,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11763
          },
          {
            "timestamp": "2026-04-25 06:58:27,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11764
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11765
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "31"
              }
            ],
            "repeated": 0,
            "id": 11766
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11767
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11768
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11769
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11770
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11771
          },
          {
            "timestamp": "2026-04-25 06:58:27,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11772
          },
          {
            "timestamp": "2026-04-25 06:58:27,329",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11773
          },
          {
            "timestamp": "2026-04-25 06:58:27,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11774
          },
          {
            "timestamp": "2026-04-25 06:58:27,329",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11775
          },
          {
            "timestamp": "2026-04-25 06:58:27,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 11776
          },
          {
            "timestamp": "2026-04-25 06:58:27,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11777
          },
          {
            "timestamp": "2026-04-25 06:58:27,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11778
          },
          {
            "timestamp": "2026-04-25 06:58:27,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11779
          },
          {
            "timestamp": "2026-04-25 06:58:27,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11780
          },
          {
            "timestamp": "2026-04-25 06:58:27,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11781
          },
          {
            "timestamp": "2026-04-25 06:58:27,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11782
          },
          {
            "timestamp": "2026-04-25 06:58:27,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11783
          },
          {
            "timestamp": "2026-04-25 06:58:27,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11784
          },
          {
            "timestamp": "2026-04-25 06:58:27,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11785
          },
          {
            "timestamp": "2026-04-25 06:58:27,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11786
          },
          {
            "timestamp": "2026-04-25 06:58:27,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11787
          },
          {
            "timestamp": "2026-04-25 06:58:27,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11788
          },
          {
            "timestamp": "2026-04-25 06:58:27,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11789
          },
          {
            "timestamp": "2026-04-25 06:58:27,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11790
          },
          {
            "timestamp": "2026-04-25 06:58:27,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11791
          },
          {
            "timestamp": "2026-04-25 06:58:27,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11792
          },
          {
            "timestamp": "2026-04-25 06:58:27,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11793
          },
          {
            "timestamp": "2026-04-25 06:58:27,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11794
          },
          {
            "timestamp": "2026-04-25 06:58:27,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11795
          },
          {
            "timestamp": "2026-04-25 06:58:27,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11796
          },
          {
            "timestamp": "2026-04-25 06:58:27,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11797
          },
          {
            "timestamp": "2026-04-25 06:58:27,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11798
          },
          {
            "timestamp": "2026-04-25 06:58:27,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11799
          },
          {
            "timestamp": "2026-04-25 06:58:27,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11800
          },
          {
            "timestamp": "2026-04-25 06:58:27,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11801
          },
          {
            "timestamp": "2026-04-25 06:58:27,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11802
          },
          {
            "timestamp": "2026-04-25 06:58:27,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11803
          },
          {
            "timestamp": "2026-04-25 06:58:27,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11804
          },
          {
            "timestamp": "2026-04-25 06:58:27,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11805
          },
          {
            "timestamp": "2026-04-25 06:58:27,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11806
          },
          {
            "timestamp": "2026-04-25 06:58:27,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11807
          },
          {
            "timestamp": "2026-04-25 06:58:27,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11808
          },
          {
            "timestamp": "2026-04-25 06:58:27,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11809
          },
          {
            "timestamp": "2026-04-25 06:58:27,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11810
          },
          {
            "timestamp": "2026-04-25 06:58:27,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11811
          },
          {
            "timestamp": "2026-04-25 06:58:27,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11812
          },
          {
            "timestamp": "2026-04-25 06:58:27,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11813
          },
          {
            "timestamp": "2026-04-25 06:58:27,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11814
          },
          {
            "timestamp": "2026-04-25 06:58:27,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11815
          },
          {
            "timestamp": "2026-04-25 06:58:27,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11816
          },
          {
            "timestamp": "2026-04-25 06:58:27,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11817
          },
          {
            "timestamp": "2026-04-25 06:58:27,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11818
          },
          {
            "timestamp": "2026-04-25 06:58:27,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11819
          },
          {
            "timestamp": "2026-04-25 06:58:27,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11820
          },
          {
            "timestamp": "2026-04-25 06:58:27,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11821
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11822
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0670b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 11823
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11824
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11825
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11826
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11827
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11828
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11829
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 11830
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11831
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x0000051c",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1308"
              }
            ],
            "repeated": 0,
            "id": 11832
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 11833
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 11834
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11835
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 11836
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000051c"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 11837
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 11838
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11839
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11840
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11841
          },
          {
            "timestamp": "2026-04-25 06:58:27,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11842
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 11843
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 11844
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 11845
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 11846
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 11847
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 11848
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1308"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 11849
          },
          {
            "timestamp": "2026-04-25 06:58:27,813",
            "thread_id": "800",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              }
            ],
            "repeated": 0,
            "id": 11850
          },
          {
            "timestamp": "2026-04-25 06:58:27,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11851
          },
          {
            "timestamp": "2026-04-25 06:58:27,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11852
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11853
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11854
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11855
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11856
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11857
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11858
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11859
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11860
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 11861
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "8160",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              }
            ],
            "repeated": 0,
            "id": 11862
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x0507da9f",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 8,
            "id": 11863
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "8160",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 11864
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "8160",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 11865
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 11866
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 11867
          },
          {
            "timestamp": "2026-04-25 06:58:27,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 13,
            "id": 11868
          },
          {
            "timestamp": "2026-04-25 06:58:27,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11869
          },
          {
            "timestamp": "2026-04-25 06:58:27,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11870
          },
          {
            "timestamp": "2026-04-25 06:58:27,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11871
          },
          {
            "timestamp": "2026-04-25 06:58:27,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11872
          },
          {
            "timestamp": "2026-04-25 06:58:27,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11873
          },
          {
            "timestamp": "2026-04-25 06:58:27,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11874
          },
          {
            "timestamp": "2026-04-25 06:58:27,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11875
          },
          {
            "timestamp": "2026-04-25 06:58:27,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11876
          },
          {
            "timestamp": "2026-04-25 06:58:27,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11877
          },
          {
            "timestamp": "2026-04-25 06:58:27,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11878
          },
          {
            "timestamp": "2026-04-25 06:58:27,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11879
          },
          {
            "timestamp": "2026-04-25 06:58:27,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11880
          },
          {
            "timestamp": "2026-04-25 06:58:27,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11881
          },
          {
            "timestamp": "2026-04-25 06:58:27,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11882
          },
          {
            "timestamp": "2026-04-25 06:58:28,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11883
          },
          {
            "timestamp": "2026-04-25 06:58:28,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11884
          },
          {
            "timestamp": "2026-04-25 06:58:28,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11885
          },
          {
            "timestamp": "2026-04-25 06:58:28,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11886
          },
          {
            "timestamp": "2026-04-25 06:58:28,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11887
          },
          {
            "timestamp": "2026-04-25 06:58:28,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11888
          },
          {
            "timestamp": "2026-04-25 06:58:28,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11889
          },
          {
            "timestamp": "2026-04-25 06:58:28,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11890
          },
          {
            "timestamp": "2026-04-25 06:58:28,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11891
          },
          {
            "timestamp": "2026-04-25 06:58:28,172",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11892
          },
          {
            "timestamp": "2026-04-25 06:58:28,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11893
          },
          {
            "timestamp": "2026-04-25 06:58:28,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11894
          },
          {
            "timestamp": "2026-04-25 06:58:28,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11895
          },
          {
            "timestamp": "2026-04-25 06:58:28,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11896
          },
          {
            "timestamp": "2026-04-25 06:58:28,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11897
          },
          {
            "timestamp": "2026-04-25 06:58:28,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11898
          },
          {
            "timestamp": "2026-04-25 06:58:28,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11899
          },
          {
            "timestamp": "2026-04-25 06:58:28,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11900
          },
          {
            "timestamp": "2026-04-25 06:58:28,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11901
          },
          {
            "timestamp": "2026-04-25 06:58:28,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11902
          },
          {
            "timestamp": "2026-04-25 06:58:28,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11903
          },
          {
            "timestamp": "2026-04-25 06:58:28,297",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11904
          },
          {
            "timestamp": "2026-04-25 06:58:28,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "32"
              }
            ],
            "repeated": 0,
            "id": 11905
          },
          {
            "timestamp": "2026-04-25 06:58:28,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11906
          },
          {
            "timestamp": "2026-04-25 06:58:28,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11907
          },
          {
            "timestamp": "2026-04-25 06:58:28,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11908
          },
          {
            "timestamp": "2026-04-25 06:58:28,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11909
          },
          {
            "timestamp": "2026-04-25 06:58:28,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11910
          },
          {
            "timestamp": "2026-04-25 06:58:28,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 11911
          },
          {
            "timestamp": "2026-04-25 06:58:28,344",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11912
          },
          {
            "timestamp": "2026-04-25 06:58:28,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11913
          },
          {
            "timestamp": "2026-04-25 06:58:28,360",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11914
          },
          {
            "timestamp": "2026-04-25 06:58:28,360",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11915
          },
          {
            "timestamp": "2026-04-25 06:58:28,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11916
          },
          {
            "timestamp": "2026-04-25 06:58:28,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11917
          },
          {
            "timestamp": "2026-04-25 06:58:28,391",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11918
          },
          {
            "timestamp": "2026-04-25 06:58:28,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11919
          },
          {
            "timestamp": "2026-04-25 06:58:28,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11920
          },
          {
            "timestamp": "2026-04-25 06:58:28,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11921
          },
          {
            "timestamp": "2026-04-25 06:58:28,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11922
          },
          {
            "timestamp": "2026-04-25 06:58:28,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11923
          },
          {
            "timestamp": "2026-04-25 06:58:28,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11924
          },
          {
            "timestamp": "2026-04-25 06:58:28,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11925
          },
          {
            "timestamp": "2026-04-25 06:58:28,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11926
          },
          {
            "timestamp": "2026-04-25 06:58:28,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11927
          },
          {
            "timestamp": "2026-04-25 06:58:28,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11928
          },
          {
            "timestamp": "2026-04-25 06:58:28,547",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11929
          },
          {
            "timestamp": "2026-04-25 06:58:28,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11930
          },
          {
            "timestamp": "2026-04-25 06:58:28,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11931
          },
          {
            "timestamp": "2026-04-25 06:58:28,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11932
          },
          {
            "timestamp": "2026-04-25 06:58:28,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11933
          },
          {
            "timestamp": "2026-04-25 06:58:28,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11934
          },
          {
            "timestamp": "2026-04-25 06:58:28,610",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11935
          },
          {
            "timestamp": "2026-04-25 06:58:28,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11936
          },
          {
            "timestamp": "2026-04-25 06:58:28,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11937
          },
          {
            "timestamp": "2026-04-25 06:58:28,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11938
          },
          {
            "timestamp": "2026-04-25 06:58:28,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11939
          },
          {
            "timestamp": "2026-04-25 06:58:28,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11940
          },
          {
            "timestamp": "2026-04-25 06:58:28,672",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11941
          },
          {
            "timestamp": "2026-04-25 06:58:28,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11942
          },
          {
            "timestamp": "2026-04-25 06:58:28,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11943
          },
          {
            "timestamp": "2026-04-25 06:58:28,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11944
          },
          {
            "timestamp": "2026-04-25 06:58:28,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11945
          },
          {
            "timestamp": "2026-04-25 06:58:28,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11946
          },
          {
            "timestamp": "2026-04-25 06:58:28,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11947
          },
          {
            "timestamp": "2026-04-25 06:58:28,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11948
          },
          {
            "timestamp": "2026-04-25 06:58:28,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11949
          },
          {
            "timestamp": "2026-04-25 06:58:28,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11950
          },
          {
            "timestamp": "2026-04-25 06:58:28,797",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11951
          },
          {
            "timestamp": "2026-04-25 06:58:28,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11952
          },
          {
            "timestamp": "2026-04-25 06:58:28,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11953
          },
          {
            "timestamp": "2026-04-25 06:58:28,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11954
          },
          {
            "timestamp": "2026-04-25 06:58:28,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11955
          },
          {
            "timestamp": "2026-04-25 06:58:28,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11956
          },
          {
            "timestamp": "2026-04-25 06:58:28,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11957
          },
          {
            "timestamp": "2026-04-25 06:58:28,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11958
          },
          {
            "timestamp": "2026-04-25 06:58:28,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11959
          },
          {
            "timestamp": "2026-04-25 06:58:28,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11960
          },
          {
            "timestamp": "2026-04-25 06:58:28,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11961
          },
          {
            "timestamp": "2026-04-25 06:58:28,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11962
          },
          {
            "timestamp": "2026-04-25 06:58:28,876",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 11963
          },
          {
            "timestamp": "2026-04-25 06:58:28,876",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 11964
          },
          {
            "timestamp": "2026-04-25 06:58:28,922",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11965
          },
          {
            "timestamp": "2026-04-25 06:58:28,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11966
          },
          {
            "timestamp": "2026-04-25 06:58:28,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11967
          },
          {
            "timestamp": "2026-04-25 06:58:28,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11968
          },
          {
            "timestamp": "2026-04-25 06:58:28,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11969
          },
          {
            "timestamp": "2026-04-25 06:58:28,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11970
          },
          {
            "timestamp": "2026-04-25 06:58:28,985",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11971
          },
          {
            "timestamp": "2026-04-25 06:58:28,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11972
          },
          {
            "timestamp": "2026-04-25 06:58:28,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11973
          },
          {
            "timestamp": "2026-04-25 06:58:28,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11974
          },
          {
            "timestamp": "2026-04-25 06:58:28,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11975
          },
          {
            "timestamp": "2026-04-25 06:58:28,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11976
          },
          {
            "timestamp": "2026-04-25 06:58:29,047",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11977
          },
          {
            "timestamp": "2026-04-25 06:58:29,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11978
          },
          {
            "timestamp": "2026-04-25 06:58:29,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11979
          },
          {
            "timestamp": "2026-04-25 06:58:29,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11980
          },
          {
            "timestamp": "2026-04-25 06:58:29,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11981
          },
          {
            "timestamp": "2026-04-25 06:58:29,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11982
          },
          {
            "timestamp": "2026-04-25 06:58:29,110",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 11983
          },
          {
            "timestamp": "2026-04-25 06:58:29,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11984
          },
          {
            "timestamp": "2026-04-25 06:58:29,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11985
          },
          {
            "timestamp": "2026-04-25 06:58:29,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11986
          },
          {
            "timestamp": "2026-04-25 06:58:29,172",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11987
          },
          {
            "timestamp": "2026-04-25 06:58:29,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11988
          },
          {
            "timestamp": "2026-04-25 06:58:29,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11989
          },
          {
            "timestamp": "2026-04-25 06:58:29,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11990
          },
          {
            "timestamp": "2026-04-25 06:58:29,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11991
          },
          {
            "timestamp": "2026-04-25 06:58:29,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11992
          },
          {
            "timestamp": "2026-04-25 06:58:29,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11993
          },
          {
            "timestamp": "2026-04-25 06:58:29,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 11994
          },
          {
            "timestamp": "2026-04-25 06:58:29,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11995
          },
          {
            "timestamp": "2026-04-25 06:58:29,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11996
          },
          {
            "timestamp": "2026-04-25 06:58:29,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11997
          },
          {
            "timestamp": "2026-04-25 06:58:29,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 11998
          },
          {
            "timestamp": "2026-04-25 06:58:29,297",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 11999
          },
          {
            "timestamp": "2026-04-25 06:58:29,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 12000
          },
          {
            "timestamp": "2026-04-25 06:58:29,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12001
          },
          {
            "timestamp": "2026-04-25 06:58:29,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12002
          },
          {
            "timestamp": "2026-04-25 06:58:29,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12003
          },
          {
            "timestamp": "2026-04-25 06:58:29,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12004
          },
          {
            "timestamp": "2026-04-25 06:58:29,360",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12005
          },
          {
            "timestamp": "2026-04-25 06:58:29,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12006
          },
          {
            "timestamp": "2026-04-25 06:58:29,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12007
          },
          {
            "timestamp": "2026-04-25 06:58:29,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12008
          },
          {
            "timestamp": "2026-04-25 06:58:29,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12009
          },
          {
            "timestamp": "2026-04-25 06:58:29,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12010
          },
          {
            "timestamp": "2026-04-25 06:58:29,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12011
          },
          {
            "timestamp": "2026-04-25 06:58:29,422",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12012
          },
          {
            "timestamp": "2026-04-25 06:58:29,422",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12013
          },
          {
            "timestamp": "2026-04-25 06:58:29,422",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12014
          },
          {
            "timestamp": "2026-04-25 06:58:29,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12015
          },
          {
            "timestamp": "2026-04-25 06:58:29,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12016
          },
          {
            "timestamp": "2026-04-25 06:58:29,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12017
          },
          {
            "timestamp": "2026-04-25 06:58:29,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12018
          },
          {
            "timestamp": "2026-04-25 06:58:29,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12019
          },
          {
            "timestamp": "2026-04-25 06:58:29,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12020
          },
          {
            "timestamp": "2026-04-25 06:58:29,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12021
          },
          {
            "timestamp": "2026-04-25 06:58:29,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12022
          },
          {
            "timestamp": "2026-04-25 06:58:29,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12023
          },
          {
            "timestamp": "2026-04-25 06:58:29,579",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12024
          },
          {
            "timestamp": "2026-04-25 06:58:29,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12025
          },
          {
            "timestamp": "2026-04-25 06:58:29,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12026
          },
          {
            "timestamp": "2026-04-25 06:58:29,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12027
          },
          {
            "timestamp": "2026-04-25 06:58:29,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12028
          },
          {
            "timestamp": "2026-04-25 06:58:29,641",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12029
          },
          {
            "timestamp": "2026-04-25 06:58:29,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12030
          },
          {
            "timestamp": "2026-04-25 06:58:29,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12031
          },
          {
            "timestamp": "2026-04-25 06:58:29,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12032
          },
          {
            "timestamp": "2026-04-25 06:58:29,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12033
          },
          {
            "timestamp": "2026-04-25 06:58:29,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12034
          },
          {
            "timestamp": "2026-04-25 06:58:29,704",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12035
          },
          {
            "timestamp": "2026-04-25 06:58:29,704",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12036
          },
          {
            "timestamp": "2026-04-25 06:58:29,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12037
          },
          {
            "timestamp": "2026-04-25 06:58:29,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12038
          },
          {
            "timestamp": "2026-04-25 06:58:29,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12039
          },
          {
            "timestamp": "2026-04-25 06:58:29,766",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12040
          },
          {
            "timestamp": "2026-04-25 06:58:29,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12041
          },
          {
            "timestamp": "2026-04-25 06:58:29,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12042
          },
          {
            "timestamp": "2026-04-25 06:58:29,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12043
          },
          {
            "timestamp": "2026-04-25 06:58:29,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12044
          },
          {
            "timestamp": "2026-04-25 06:58:29,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12045
          },
          {
            "timestamp": "2026-04-25 06:58:29,829",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12046
          },
          {
            "timestamp": "2026-04-25 06:58:29,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12047
          },
          {
            "timestamp": "2026-04-25 06:58:29,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12048
          },
          {
            "timestamp": "2026-04-25 06:58:29,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12049
          },
          {
            "timestamp": "2026-04-25 06:58:29,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12050
          },
          {
            "timestamp": "2026-04-25 06:58:29,829",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12051
          },
          {
            "timestamp": "2026-04-25 06:58:29,891",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12052
          },
          {
            "timestamp": "2026-04-25 06:58:29,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12053
          },
          {
            "timestamp": "2026-04-25 06:58:29,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12054
          },
          {
            "timestamp": "2026-04-25 06:58:29,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12055
          },
          {
            "timestamp": "2026-04-25 06:58:29,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12056
          },
          {
            "timestamp": "2026-04-25 06:58:29,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12057
          },
          {
            "timestamp": "2026-04-25 06:58:29,954",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12058
          },
          {
            "timestamp": "2026-04-25 06:58:29,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12059
          },
          {
            "timestamp": "2026-04-25 06:58:29,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12060
          },
          {
            "timestamp": "2026-04-25 06:58:29,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12061
          },
          {
            "timestamp": "2026-04-25 06:58:29,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12062
          },
          {
            "timestamp": "2026-04-25 06:58:29,954",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12063
          },
          {
            "timestamp": "2026-04-25 06:58:29,954",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12064
          },
          {
            "timestamp": "2026-04-25 06:58:30,016",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12065
          },
          {
            "timestamp": "2026-04-25 06:58:30,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12066
          },
          {
            "timestamp": "2026-04-25 06:58:30,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12067
          },
          {
            "timestamp": "2026-04-25 06:58:30,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12068
          },
          {
            "timestamp": "2026-04-25 06:58:30,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12069
          },
          {
            "timestamp": "2026-04-25 06:58:30,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12070
          },
          {
            "timestamp": "2026-04-25 06:58:30,079",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12071
          },
          {
            "timestamp": "2026-04-25 06:58:30,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12072
          },
          {
            "timestamp": "2026-04-25 06:58:30,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12073
          },
          {
            "timestamp": "2026-04-25 06:58:30,079",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12074
          },
          {
            "timestamp": "2026-04-25 06:58:30,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12075
          },
          {
            "timestamp": "2026-04-25 06:58:30,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12076
          },
          {
            "timestamp": "2026-04-25 06:58:30,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12077
          },
          {
            "timestamp": "2026-04-25 06:58:30,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12078
          },
          {
            "timestamp": "2026-04-25 06:58:30,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12079
          },
          {
            "timestamp": "2026-04-25 06:58:30,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12080
          },
          {
            "timestamp": "2026-04-25 06:58:30,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12081
          },
          {
            "timestamp": "2026-04-25 06:58:30,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12082
          },
          {
            "timestamp": "2026-04-25 06:58:30,204",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12083
          },
          {
            "timestamp": "2026-04-25 06:58:30,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12084
          },
          {
            "timestamp": "2026-04-25 06:58:30,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12085
          },
          {
            "timestamp": "2026-04-25 06:58:30,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12086
          },
          {
            "timestamp": "2026-04-25 06:58:30,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12087
          },
          {
            "timestamp": "2026-04-25 06:58:30,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12088
          },
          {
            "timestamp": "2026-04-25 06:58:30,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12089
          },
          {
            "timestamp": "2026-04-25 06:58:30,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12090
          },
          {
            "timestamp": "2026-04-25 06:58:30,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12091
          },
          {
            "timestamp": "2026-04-25 06:58:30,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12092
          },
          {
            "timestamp": "2026-04-25 06:58:30,360",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12093
          },
          {
            "timestamp": "2026-04-25 06:58:30,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12094
          },
          {
            "timestamp": "2026-04-25 06:58:30,360",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12095
          },
          {
            "timestamp": "2026-04-25 06:58:30,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12096
          },
          {
            "timestamp": "2026-04-25 06:58:30,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12097
          },
          {
            "timestamp": "2026-04-25 06:58:30,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12098
          },
          {
            "timestamp": "2026-04-25 06:58:30,422",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12099
          },
          {
            "timestamp": "2026-04-25 06:58:30,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12100
          },
          {
            "timestamp": "2026-04-25 06:58:30,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12101
          },
          {
            "timestamp": "2026-04-25 06:58:30,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12102
          },
          {
            "timestamp": "2026-04-25 06:58:30,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12103
          },
          {
            "timestamp": "2026-04-25 06:58:30,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12104
          },
          {
            "timestamp": "2026-04-25 06:58:30,469",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12105
          },
          {
            "timestamp": "2026-04-25 06:58:30,469",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12106
          },
          {
            "timestamp": "2026-04-25 06:58:30,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12107
          },
          {
            "timestamp": "2026-04-25 06:58:30,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12108
          },
          {
            "timestamp": "2026-04-25 06:58:30,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12109
          },
          {
            "timestamp": "2026-04-25 06:58:30,485",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12110
          },
          {
            "timestamp": "2026-04-25 06:58:30,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12111
          },
          {
            "timestamp": "2026-04-25 06:58:30,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12112
          },
          {
            "timestamp": "2026-04-25 06:58:30,547",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12113
          },
          {
            "timestamp": "2026-04-25 06:58:30,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12114
          },
          {
            "timestamp": "2026-04-25 06:58:30,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12115
          },
          {
            "timestamp": "2026-04-25 06:58:30,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12116
          },
          {
            "timestamp": "2026-04-25 06:58:30,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12117
          },
          {
            "timestamp": "2026-04-25 06:58:30,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12118
          },
          {
            "timestamp": "2026-04-25 06:58:30,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12119
          },
          {
            "timestamp": "2026-04-25 06:58:30,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12120
          },
          {
            "timestamp": "2026-04-25 06:58:30,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12121
          },
          {
            "timestamp": "2026-04-25 06:58:30,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12122
          },
          {
            "timestamp": "2026-04-25 06:58:30,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12123
          },
          {
            "timestamp": "2026-04-25 06:58:30,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12124
          },
          {
            "timestamp": "2026-04-25 06:58:30,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12125
          },
          {
            "timestamp": "2026-04-25 06:58:30,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12126
          },
          {
            "timestamp": "2026-04-25 06:58:30,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12127
          },
          {
            "timestamp": "2026-04-25 06:58:30,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12128
          },
          {
            "timestamp": "2026-04-25 06:58:30,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12129
          },
          {
            "timestamp": "2026-04-25 06:58:30,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12130
          },
          {
            "timestamp": "2026-04-25 06:58:30,751",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12131
          },
          {
            "timestamp": "2026-04-25 06:58:30,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12132
          },
          {
            "timestamp": "2026-04-25 06:58:30,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12133
          },
          {
            "timestamp": "2026-04-25 06:58:30,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12134
          },
          {
            "timestamp": "2026-04-25 06:58:30,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12135
          },
          {
            "timestamp": "2026-04-25 06:58:30,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12136
          },
          {
            "timestamp": "2026-04-25 06:58:30,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12137
          },
          {
            "timestamp": "2026-04-25 06:58:30,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12138
          },
          {
            "timestamp": "2026-04-25 06:58:30,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12139
          },
          {
            "timestamp": "2026-04-25 06:58:30,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12140
          },
          {
            "timestamp": "2026-04-25 06:58:30,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12141
          },
          {
            "timestamp": "2026-04-25 06:58:30,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12142
          },
          {
            "timestamp": "2026-04-25 06:58:30,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12143
          },
          {
            "timestamp": "2026-04-25 06:58:30,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12144
          },
          {
            "timestamp": "2026-04-25 06:58:30,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12145
          },
          {
            "timestamp": "2026-04-25 06:58:30,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12146
          },
          {
            "timestamp": "2026-04-25 06:58:30,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12147
          },
          {
            "timestamp": "2026-04-25 06:58:30,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12148
          },
          {
            "timestamp": "2026-04-25 06:58:30,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12149
          },
          {
            "timestamp": "2026-04-25 06:58:30,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12150
          },
          {
            "timestamp": "2026-04-25 06:58:30,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12151
          },
          {
            "timestamp": "2026-04-25 06:58:30,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12152
          },
          {
            "timestamp": "2026-04-25 06:58:30,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12153
          },
          {
            "timestamp": "2026-04-25 06:58:30,985",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12154
          },
          {
            "timestamp": "2026-04-25 06:58:30,985",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12155
          },
          {
            "timestamp": "2026-04-25 06:58:31,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12156
          },
          {
            "timestamp": "2026-04-25 06:58:31,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12157
          },
          {
            "timestamp": "2026-04-25 06:58:31,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12158
          },
          {
            "timestamp": "2026-04-25 06:58:31,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12159
          },
          {
            "timestamp": "2026-04-25 06:58:31,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12160
          },
          {
            "timestamp": "2026-04-25 06:58:31,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12161
          },
          {
            "timestamp": "2026-04-25 06:58:31,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12162
          },
          {
            "timestamp": "2026-04-25 06:58:31,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12163
          },
          {
            "timestamp": "2026-04-25 06:58:31,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12164
          },
          {
            "timestamp": "2026-04-25 06:58:31,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12165
          },
          {
            "timestamp": "2026-04-25 06:58:31,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12166
          },
          {
            "timestamp": "2026-04-25 06:58:31,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12167
          },
          {
            "timestamp": "2026-04-25 06:58:31,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12168
          },
          {
            "timestamp": "2026-04-25 06:58:31,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12169
          },
          {
            "timestamp": "2026-04-25 06:58:31,188",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12170
          },
          {
            "timestamp": "2026-04-25 06:58:31,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12171
          },
          {
            "timestamp": "2026-04-25 06:58:31,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12172
          },
          {
            "timestamp": "2026-04-25 06:58:31,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12173
          },
          {
            "timestamp": "2026-04-25 06:58:31,266",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12174
          },
          {
            "timestamp": "2026-04-25 06:58:31,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12175
          },
          {
            "timestamp": "2026-04-25 06:58:31,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12176
          },
          {
            "timestamp": "2026-04-25 06:58:31,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12177
          },
          {
            "timestamp": "2026-04-25 06:58:31,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12178
          },
          {
            "timestamp": "2026-04-25 06:58:31,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12179
          },
          {
            "timestamp": "2026-04-25 06:58:31,329",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12180
          },
          {
            "timestamp": "2026-04-25 06:58:31,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12181
          },
          {
            "timestamp": "2026-04-25 06:58:31,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12182
          },
          {
            "timestamp": "2026-04-25 06:58:31,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12183
          },
          {
            "timestamp": "2026-04-25 06:58:31,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12184
          },
          {
            "timestamp": "2026-04-25 06:58:31,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 12185
          },
          {
            "timestamp": "2026-04-25 06:58:31,376",
            "thread_id": "6328",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12186
          },
          {
            "timestamp": "2026-04-25 06:58:31,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12187
          },
          {
            "timestamp": "2026-04-25 06:58:31,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12188
          },
          {
            "timestamp": "2026-04-25 06:58:31,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12189
          },
          {
            "timestamp": "2026-04-25 06:58:31,391",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12190
          },
          {
            "timestamp": "2026-04-25 06:58:31,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12191
          },
          {
            "timestamp": "2026-04-25 06:58:31,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12192
          },
          {
            "timestamp": "2026-04-25 06:58:31,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12193
          },
          {
            "timestamp": "2026-04-25 06:58:31,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12194
          },
          {
            "timestamp": "2026-04-25 06:58:31,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12195
          },
          {
            "timestamp": "2026-04-25 06:58:31,454",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12196
          },
          {
            "timestamp": "2026-04-25 06:58:31,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12197
          },
          {
            "timestamp": "2026-04-25 06:58:31,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12198
          },
          {
            "timestamp": "2026-04-25 06:58:31,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12199
          },
          {
            "timestamp": "2026-04-25 06:58:31,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12200
          },
          {
            "timestamp": "2026-04-25 06:58:31,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12201
          },
          {
            "timestamp": "2026-04-25 06:58:31,501",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12202
          },
          {
            "timestamp": "2026-04-25 06:58:31,501",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12203
          },
          {
            "timestamp": "2026-04-25 06:58:31,516",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12204
          },
          {
            "timestamp": "2026-04-25 06:58:31,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12205
          },
          {
            "timestamp": "2026-04-25 06:58:31,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12206
          },
          {
            "timestamp": "2026-04-25 06:58:31,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12207
          },
          {
            "timestamp": "2026-04-25 06:58:31,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12208
          },
          {
            "timestamp": "2026-04-25 06:58:31,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12209
          },
          {
            "timestamp": "2026-04-25 06:58:31,579",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12210
          },
          {
            "timestamp": "2026-04-25 06:58:31,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12211
          },
          {
            "timestamp": "2026-04-25 06:58:31,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12212
          },
          {
            "timestamp": "2026-04-25 06:58:31,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12213
          },
          {
            "timestamp": "2026-04-25 06:58:31,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12214
          },
          {
            "timestamp": "2026-04-25 06:58:31,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12215
          },
          {
            "timestamp": "2026-04-25 06:58:31,641",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12216
          },
          {
            "timestamp": "2026-04-25 06:58:31,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12217
          },
          {
            "timestamp": "2026-04-25 06:58:31,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12218
          },
          {
            "timestamp": "2026-04-25 06:58:31,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12219
          },
          {
            "timestamp": "2026-04-25 06:58:31,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12220
          },
          {
            "timestamp": "2026-04-25 06:58:31,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12221
          },
          {
            "timestamp": "2026-04-25 06:58:31,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12222
          },
          {
            "timestamp": "2026-04-25 06:58:31,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12223
          },
          {
            "timestamp": "2026-04-25 06:58:31,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12224
          },
          {
            "timestamp": "2026-04-25 06:58:31,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12225
          },
          {
            "timestamp": "2026-04-25 06:58:31,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12226
          },
          {
            "timestamp": "2026-04-25 06:58:31,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12227
          },
          {
            "timestamp": "2026-04-25 06:58:31,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12228
          },
          {
            "timestamp": "2026-04-25 06:58:31,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12229
          },
          {
            "timestamp": "2026-04-25 06:58:31,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12230
          },
          {
            "timestamp": "2026-04-25 06:58:31,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12231
          },
          {
            "timestamp": "2026-04-25 06:58:31,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12232
          },
          {
            "timestamp": "2026-04-25 06:58:31,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12233
          },
          {
            "timestamp": "2026-04-25 06:58:31,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12234
          },
          {
            "timestamp": "2026-04-25 06:58:31,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12235
          },
          {
            "timestamp": "2026-04-25 06:58:31,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12236
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12237
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0672b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 12238
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12239
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12240
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 12241
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12242
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000654",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1620"
              }
            ],
            "repeated": 0,
            "id": 12243
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1620"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 12244
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 12245
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000654"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 12246
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1620"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 12247
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12248
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12249
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12250
          },
          {
            "timestamp": "2026-04-25 06:58:31,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12251
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1620"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 12252
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 12253
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 12254
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 12255
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 12256
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 12257
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1620"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 12258
          },
          {
            "timestamp": "2026-04-25 06:58:31,876",
            "thread_id": "8160",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1620"
              }
            ],
            "repeated": 0,
            "id": 12259
          },
          {
            "timestamp": "2026-04-25 06:58:31,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12260
          },
          {
            "timestamp": "2026-04-25 06:58:31,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12261
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12262
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12263
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12264
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12265
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12266
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12267
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 12268
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "800",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1620"
              }
            ],
            "repeated": 0,
            "id": 12269
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "800",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 12270
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "800",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 12271
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12272
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12273
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "6328",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 12274
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 12,
            "id": 12275
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12276
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12277
          },
          {
            "timestamp": "2026-04-25 06:58:31,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12278
          },
          {
            "timestamp": "2026-04-25 06:58:31,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12279
          },
          {
            "timestamp": "2026-04-25 06:58:31,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12280
          },
          {
            "timestamp": "2026-04-25 06:58:31,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12281
          },
          {
            "timestamp": "2026-04-25 06:58:31,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12282
          },
          {
            "timestamp": "2026-04-25 06:58:31,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12283
          },
          {
            "timestamp": "2026-04-25 06:58:31,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12284
          },
          {
            "timestamp": "2026-04-25 06:58:32,016",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12285
          },
          {
            "timestamp": "2026-04-25 06:58:32,016",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12286
          },
          {
            "timestamp": "2026-04-25 06:58:32,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12287
          },
          {
            "timestamp": "2026-04-25 06:58:32,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12288
          },
          {
            "timestamp": "2026-04-25 06:58:32,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12289
          },
          {
            "timestamp": "2026-04-25 06:58:32,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12290
          },
          {
            "timestamp": "2026-04-25 06:58:32,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12291
          },
          {
            "timestamp": "2026-04-25 06:58:32,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12292
          },
          {
            "timestamp": "2026-04-25 06:58:32,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12293
          },
          {
            "timestamp": "2026-04-25 06:58:32,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12294
          },
          {
            "timestamp": "2026-04-25 06:58:32,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12295
          },
          {
            "timestamp": "2026-04-25 06:58:32,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12296
          },
          {
            "timestamp": "2026-04-25 06:58:32,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12297
          },
          {
            "timestamp": "2026-04-25 06:58:32,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12298
          },
          {
            "timestamp": "2026-04-25 06:58:32,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12299
          },
          {
            "timestamp": "2026-04-25 06:58:32,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12300
          },
          {
            "timestamp": "2026-04-25 06:58:32,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12301
          },
          {
            "timestamp": "2026-04-25 06:58:32,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12302
          },
          {
            "timestamp": "2026-04-25 06:58:32,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12303
          },
          {
            "timestamp": "2026-04-25 06:58:32,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12304
          },
          {
            "timestamp": "2026-04-25 06:58:32,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12305
          },
          {
            "timestamp": "2026-04-25 06:58:32,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12306
          },
          {
            "timestamp": "2026-04-25 06:58:32,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12307
          },
          {
            "timestamp": "2026-04-25 06:58:32,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12308
          },
          {
            "timestamp": "2026-04-25 06:58:32,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12309
          },
          {
            "timestamp": "2026-04-25 06:58:32,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12310
          },
          {
            "timestamp": "2026-04-25 06:58:32,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12311
          },
          {
            "timestamp": "2026-04-25 06:58:32,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12312
          },
          {
            "timestamp": "2026-04-25 06:58:32,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12313
          },
          {
            "timestamp": "2026-04-25 06:58:32,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12314
          },
          {
            "timestamp": "2026-04-25 06:58:32,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12315
          },
          {
            "timestamp": "2026-04-25 06:58:32,407",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12316
          },
          {
            "timestamp": "2026-04-25 06:58:32,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12317
          },
          {
            "timestamp": "2026-04-25 06:58:32,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12318
          },
          {
            "timestamp": "2026-04-25 06:58:32,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12319
          },
          {
            "timestamp": "2026-04-25 06:58:32,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12320
          },
          {
            "timestamp": "2026-04-25 06:58:32,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12321
          },
          {
            "timestamp": "2026-04-25 06:58:32,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12322
          },
          {
            "timestamp": "2026-04-25 06:58:32,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12323
          },
          {
            "timestamp": "2026-04-25 06:58:32,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12324
          },
          {
            "timestamp": "2026-04-25 06:58:32,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12325
          },
          {
            "timestamp": "2026-04-25 06:58:32,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12326
          },
          {
            "timestamp": "2026-04-25 06:58:32,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12327
          },
          {
            "timestamp": "2026-04-25 06:58:32,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12328
          },
          {
            "timestamp": "2026-04-25 06:58:32,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12329
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12330
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12331
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12332
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12333
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12334
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12335
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12336
          },
          {
            "timestamp": "2026-04-25 06:58:32,532",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12337
          },
          {
            "timestamp": "2026-04-25 06:58:32,610",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12338
          },
          {
            "timestamp": "2026-04-25 06:58:32,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12339
          },
          {
            "timestamp": "2026-04-25 06:58:32,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12340
          },
          {
            "timestamp": "2026-04-25 06:58:32,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12341
          },
          {
            "timestamp": "2026-04-25 06:58:32,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12342
          },
          {
            "timestamp": "2026-04-25 06:58:32,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12343
          },
          {
            "timestamp": "2026-04-25 06:58:32,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12344
          },
          {
            "timestamp": "2026-04-25 06:58:32,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12345
          },
          {
            "timestamp": "2026-04-25 06:58:32,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12346
          },
          {
            "timestamp": "2026-04-25 06:58:32,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12347
          },
          {
            "timestamp": "2026-04-25 06:58:32,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12348
          },
          {
            "timestamp": "2026-04-25 06:58:32,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12349
          },
          {
            "timestamp": "2026-04-25 06:58:32,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12350
          },
          {
            "timestamp": "2026-04-25 06:58:32,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12351
          },
          {
            "timestamp": "2026-04-25 06:58:32,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12352
          },
          {
            "timestamp": "2026-04-25 06:58:32,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12353
          },
          {
            "timestamp": "2026-04-25 06:58:32,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12354
          },
          {
            "timestamp": "2026-04-25 06:58:32,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12355
          },
          {
            "timestamp": "2026-04-25 06:58:32,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12356
          },
          {
            "timestamp": "2026-04-25 06:58:32,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12357
          },
          {
            "timestamp": "2026-04-25 06:58:32,876",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12358
          },
          {
            "timestamp": "2026-04-25 06:58:32,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12359
          },
          {
            "timestamp": "2026-04-25 06:58:32,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12360
          },
          {
            "timestamp": "2026-04-25 06:58:32,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12361
          },
          {
            "timestamp": "2026-04-25 06:58:32,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12362
          },
          {
            "timestamp": "2026-04-25 06:58:32,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12363
          },
          {
            "timestamp": "2026-04-25 06:58:32,938",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12364
          },
          {
            "timestamp": "2026-04-25 06:58:32,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12365
          },
          {
            "timestamp": "2026-04-25 06:58:32,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12366
          },
          {
            "timestamp": "2026-04-25 06:58:32,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12367
          },
          {
            "timestamp": "2026-04-25 06:58:32,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12368
          },
          {
            "timestamp": "2026-04-25 06:58:32,938",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12369
          },
          {
            "timestamp": "2026-04-25 06:58:33,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12370
          },
          {
            "timestamp": "2026-04-25 06:58:33,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12371
          },
          {
            "timestamp": "2026-04-25 06:58:33,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12372
          },
          {
            "timestamp": "2026-04-25 06:58:33,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12373
          },
          {
            "timestamp": "2026-04-25 06:58:33,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12374
          },
          {
            "timestamp": "2026-04-25 06:58:33,079",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12375
          },
          {
            "timestamp": "2026-04-25 06:58:33,079",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12376
          },
          {
            "timestamp": "2026-04-25 06:58:33,079",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12377
          },
          {
            "timestamp": "2026-04-25 06:58:33,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12378
          },
          {
            "timestamp": "2026-04-25 06:58:33,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12379
          },
          {
            "timestamp": "2026-04-25 06:58:33,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12380
          },
          {
            "timestamp": "2026-04-25 06:58:33,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12381
          },
          {
            "timestamp": "2026-04-25 06:58:33,172",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12382
          },
          {
            "timestamp": "2026-04-25 06:58:33,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12383
          },
          {
            "timestamp": "2026-04-25 06:58:33,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12384
          },
          {
            "timestamp": "2026-04-25 06:58:33,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12385
          },
          {
            "timestamp": "2026-04-25 06:58:33,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12386
          },
          {
            "timestamp": "2026-04-25 06:58:33,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12387
          },
          {
            "timestamp": "2026-04-25 06:58:33,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12388
          },
          {
            "timestamp": "2026-04-25 06:58:33,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12389
          },
          {
            "timestamp": "2026-04-25 06:58:33,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12390
          },
          {
            "timestamp": "2026-04-25 06:58:33,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12391
          },
          {
            "timestamp": "2026-04-25 06:58:33,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12392
          },
          {
            "timestamp": "2026-04-25 06:58:33,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12393
          },
          {
            "timestamp": "2026-04-25 06:58:33,297",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12394
          },
          {
            "timestamp": "2026-04-25 06:58:33,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12395
          },
          {
            "timestamp": "2026-04-25 06:58:33,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12396
          },
          {
            "timestamp": "2026-04-25 06:58:33,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12397
          },
          {
            "timestamp": "2026-04-25 06:58:33,360",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12398
          },
          {
            "timestamp": "2026-04-25 06:58:33,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 12399
          },
          {
            "timestamp": "2026-04-25 06:58:33,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12400
          },
          {
            "timestamp": "2026-04-25 06:58:33,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12401
          },
          {
            "timestamp": "2026-04-25 06:58:33,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12402
          },
          {
            "timestamp": "2026-04-25 06:58:33,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12403
          },
          {
            "timestamp": "2026-04-25 06:58:33,422",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12404
          },
          {
            "timestamp": "2026-04-25 06:58:33,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12405
          },
          {
            "timestamp": "2026-04-25 06:58:33,422",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12406
          },
          {
            "timestamp": "2026-04-25 06:58:33,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12407
          },
          {
            "timestamp": "2026-04-25 06:58:33,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12408
          },
          {
            "timestamp": "2026-04-25 06:58:33,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12409
          },
          {
            "timestamp": "2026-04-25 06:58:33,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12410
          },
          {
            "timestamp": "2026-04-25 06:58:33,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12411
          },
          {
            "timestamp": "2026-04-25 06:58:33,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12412
          },
          {
            "timestamp": "2026-04-25 06:58:33,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12413
          },
          {
            "timestamp": "2026-04-25 06:58:33,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12414
          },
          {
            "timestamp": "2026-04-25 06:58:33,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12415
          },
          {
            "timestamp": "2026-04-25 06:58:33,547",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12416
          },
          {
            "timestamp": "2026-04-25 06:58:33,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12417
          },
          {
            "timestamp": "2026-04-25 06:58:33,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12418
          },
          {
            "timestamp": "2026-04-25 06:58:33,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12419
          },
          {
            "timestamp": "2026-04-25 06:58:33,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12420
          },
          {
            "timestamp": "2026-04-25 06:58:33,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12421
          },
          {
            "timestamp": "2026-04-25 06:58:33,594",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12422
          },
          {
            "timestamp": "2026-04-25 06:58:33,594",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12423
          },
          {
            "timestamp": "2026-04-25 06:58:33,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12424
          },
          {
            "timestamp": "2026-04-25 06:58:33,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12425
          },
          {
            "timestamp": "2026-04-25 06:58:33,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12426
          },
          {
            "timestamp": "2026-04-25 06:58:33,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12427
          },
          {
            "timestamp": "2026-04-25 06:58:33,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12428
          },
          {
            "timestamp": "2026-04-25 06:58:33,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12429
          },
          {
            "timestamp": "2026-04-25 06:58:33,688",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12430
          },
          {
            "timestamp": "2026-04-25 06:58:33,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12431
          },
          {
            "timestamp": "2026-04-25 06:58:33,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12432
          },
          {
            "timestamp": "2026-04-25 06:58:33,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12433
          },
          {
            "timestamp": "2026-04-25 06:58:33,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12434
          },
          {
            "timestamp": "2026-04-25 06:58:33,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12435
          },
          {
            "timestamp": "2026-04-25 06:58:33,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12436
          },
          {
            "timestamp": "2026-04-25 06:58:33,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12437
          },
          {
            "timestamp": "2026-04-25 06:58:33,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12438
          },
          {
            "timestamp": "2026-04-25 06:58:33,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12439
          },
          {
            "timestamp": "2026-04-25 06:58:33,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12440
          },
          {
            "timestamp": "2026-04-25 06:58:33,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12441
          },
          {
            "timestamp": "2026-04-25 06:58:33,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12442
          },
          {
            "timestamp": "2026-04-25 06:58:33,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12443
          },
          {
            "timestamp": "2026-04-25 06:58:33,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12444
          },
          {
            "timestamp": "2026-04-25 06:58:33,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12445
          },
          {
            "timestamp": "2026-04-25 06:58:33,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12446
          },
          {
            "timestamp": "2026-04-25 06:58:33,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12447
          },
          {
            "timestamp": "2026-04-25 06:58:33,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12448
          },
          {
            "timestamp": "2026-04-25 06:58:33,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12449
          },
          {
            "timestamp": "2026-04-25 06:58:33,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12450
          },
          {
            "timestamp": "2026-04-25 06:58:33,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12451
          },
          {
            "timestamp": "2026-04-25 06:58:33,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12452
          },
          {
            "timestamp": "2026-04-25 06:58:33,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12453
          },
          {
            "timestamp": "2026-04-25 06:58:33,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12454
          },
          {
            "timestamp": "2026-04-25 06:58:33,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12455
          },
          {
            "timestamp": "2026-04-25 06:58:33,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12456
          },
          {
            "timestamp": "2026-04-25 06:58:33,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12457
          },
          {
            "timestamp": "2026-04-25 06:58:33,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12458
          },
          {
            "timestamp": "2026-04-25 06:58:33,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12459
          },
          {
            "timestamp": "2026-04-25 06:58:34,047",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12460
          },
          {
            "timestamp": "2026-04-25 06:58:34,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12461
          },
          {
            "timestamp": "2026-04-25 06:58:34,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12462
          },
          {
            "timestamp": "2026-04-25 06:58:34,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12463
          },
          {
            "timestamp": "2026-04-25 06:58:34,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12464
          },
          {
            "timestamp": "2026-04-25 06:58:34,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12465
          },
          {
            "timestamp": "2026-04-25 06:58:34,110",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12466
          },
          {
            "timestamp": "2026-04-25 06:58:34,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12467
          },
          {
            "timestamp": "2026-04-25 06:58:34,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12468
          },
          {
            "timestamp": "2026-04-25 06:58:34,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12469
          },
          {
            "timestamp": "2026-04-25 06:58:34,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12470
          },
          {
            "timestamp": "2026-04-25 06:58:34,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12471
          },
          {
            "timestamp": "2026-04-25 06:58:34,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12472
          },
          {
            "timestamp": "2026-04-25 06:58:34,172",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12473
          },
          {
            "timestamp": "2026-04-25 06:58:34,172",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12474
          },
          {
            "timestamp": "2026-04-25 06:58:34,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12475
          },
          {
            "timestamp": "2026-04-25 06:58:34,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12476
          },
          {
            "timestamp": "2026-04-25 06:58:34,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12477
          },
          {
            "timestamp": "2026-04-25 06:58:34,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12478
          },
          {
            "timestamp": "2026-04-25 06:58:34,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12479
          },
          {
            "timestamp": "2026-04-25 06:58:34,235",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12480
          },
          {
            "timestamp": "2026-04-25 06:58:34,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12481
          },
          {
            "timestamp": "2026-04-25 06:58:34,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12482
          },
          {
            "timestamp": "2026-04-25 06:58:34,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12483
          },
          {
            "timestamp": "2026-04-25 06:58:34,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12484
          },
          {
            "timestamp": "2026-04-25 06:58:34,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12485
          },
          {
            "timestamp": "2026-04-25 06:58:34,297",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12486
          },
          {
            "timestamp": "2026-04-25 06:58:34,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12487
          },
          {
            "timestamp": "2026-04-25 06:58:34,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12488
          },
          {
            "timestamp": "2026-04-25 06:58:34,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12489
          },
          {
            "timestamp": "2026-04-25 06:58:34,360",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12490
          },
          {
            "timestamp": "2026-04-25 06:58:34,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12491
          },
          {
            "timestamp": "2026-04-25 06:58:34,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12492
          },
          {
            "timestamp": "2026-04-25 06:58:34,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12493
          },
          {
            "timestamp": "2026-04-25 06:58:34,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12494
          },
          {
            "timestamp": "2026-04-25 06:58:34,422",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12495
          },
          {
            "timestamp": "2026-04-25 06:58:34,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12496
          },
          {
            "timestamp": "2026-04-25 06:58:34,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12497
          },
          {
            "timestamp": "2026-04-25 06:58:34,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12498
          },
          {
            "timestamp": "2026-04-25 06:58:34,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12499
          },
          {
            "timestamp": "2026-04-25 06:58:34,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12500
          },
          {
            "timestamp": "2026-04-25 06:58:34,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12501
          },
          {
            "timestamp": "2026-04-25 06:58:34,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12502
          },
          {
            "timestamp": "2026-04-25 06:58:34,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12503
          },
          {
            "timestamp": "2026-04-25 06:58:34,485",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12504
          },
          {
            "timestamp": "2026-04-25 06:58:34,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12505
          },
          {
            "timestamp": "2026-04-25 06:58:34,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12506
          },
          {
            "timestamp": "2026-04-25 06:58:34,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12507
          },
          {
            "timestamp": "2026-04-25 06:58:34,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12508
          },
          {
            "timestamp": "2026-04-25 06:58:34,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12509
          },
          {
            "timestamp": "2026-04-25 06:58:34,547",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12510
          },
          {
            "timestamp": "2026-04-25 06:58:34,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12511
          },
          {
            "timestamp": "2026-04-25 06:58:34,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12512
          },
          {
            "timestamp": "2026-04-25 06:58:34,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12513
          },
          {
            "timestamp": "2026-04-25 06:58:34,610",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12514
          },
          {
            "timestamp": "2026-04-25 06:58:34,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12515
          },
          {
            "timestamp": "2026-04-25 06:58:34,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12516
          },
          {
            "timestamp": "2026-04-25 06:58:34,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12517
          },
          {
            "timestamp": "2026-04-25 06:58:34,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12518
          },
          {
            "timestamp": "2026-04-25 06:58:34,657",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12519
          },
          {
            "timestamp": "2026-04-25 06:58:34,657",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12520
          },
          {
            "timestamp": "2026-04-25 06:58:34,672",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12521
          },
          {
            "timestamp": "2026-04-25 06:58:34,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12522
          },
          {
            "timestamp": "2026-04-25 06:58:34,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12523
          },
          {
            "timestamp": "2026-04-25 06:58:34,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12524
          },
          {
            "timestamp": "2026-04-25 06:58:34,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12525
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x7385b070",
            "parentcaller": "0x7385b08b",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "16"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "5976"
              }
            ],
            "repeated": 0,
            "id": 12526
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x7726074f",
            "parentcaller": "0x77bfbb70",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "oleaut32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76060000"
              }
            ],
            "repeated": 0,
            "id": 12527
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x77eab5a6",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "5976"
              }
            ],
            "repeated": 0,
            "id": 12528
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x747cad94",
            "parentcaller": "0x747ca15c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006a0"
              }
            ],
            "repeated": 0,
            "id": 12529
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 12530
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x774e45ae",
            "parentcaller": "0x774e442c",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 12531
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x7726269a",
            "parentcaller": "0x76645041",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000069c"
              }
            ],
            "repeated": 0,
            "id": 12532
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006a8"
              }
            ],
            "repeated": 0,
            "id": 12533
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006a4"
              }
            ],
            "repeated": 0,
            "id": 12534
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "5976",
            "caller": "0x77eab5c9",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 12535
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12536
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12537
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12538
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12539
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12540
          },
          {
            "timestamp": "2026-04-25 06:58:34,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12541
          },
          {
            "timestamp": "2026-04-25 06:58:34,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12542
          },
          {
            "timestamp": "2026-04-25 06:58:34,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12543
          },
          {
            "timestamp": "2026-04-25 06:58:34,797",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12544
          },
          {
            "timestamp": "2026-04-25 06:58:34,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12545
          },
          {
            "timestamp": "2026-04-25 06:58:34,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12546
          },
          {
            "timestamp": "2026-04-25 06:58:34,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12547
          },
          {
            "timestamp": "2026-04-25 06:58:34,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12548
          },
          {
            "timestamp": "2026-04-25 06:58:34,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12549
          },
          {
            "timestamp": "2026-04-25 06:58:34,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12550
          },
          {
            "timestamp": "2026-04-25 06:58:34,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12551
          },
          {
            "timestamp": "2026-04-25 06:58:34,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12552
          },
          {
            "timestamp": "2026-04-25 06:58:34,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12553
          },
          {
            "timestamp": "2026-04-25 06:58:34,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12554
          },
          {
            "timestamp": "2026-04-25 06:58:34,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12555
          },
          {
            "timestamp": "2026-04-25 06:58:34,922",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12556
          },
          {
            "timestamp": "2026-04-25 06:58:34,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12557
          },
          {
            "timestamp": "2026-04-25 06:58:34,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12558
          },
          {
            "timestamp": "2026-04-25 06:58:34,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12559
          },
          {
            "timestamp": "2026-04-25 06:58:35,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12560
          },
          {
            "timestamp": "2026-04-25 06:58:35,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12561
          },
          {
            "timestamp": "2026-04-25 06:58:35,001",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12562
          },
          {
            "timestamp": "2026-04-25 06:58:35,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12563
          },
          {
            "timestamp": "2026-04-25 06:58:35,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12564
          },
          {
            "timestamp": "2026-04-25 06:58:35,001",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12565
          },
          {
            "timestamp": "2026-04-25 06:58:35,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12566
          },
          {
            "timestamp": "2026-04-25 06:58:35,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12567
          },
          {
            "timestamp": "2026-04-25 06:58:35,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12568
          },
          {
            "timestamp": "2026-04-25 06:58:35,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12569
          },
          {
            "timestamp": "2026-04-25 06:58:35,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12570
          },
          {
            "timestamp": "2026-04-25 06:58:35,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12571
          },
          {
            "timestamp": "2026-04-25 06:58:35,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12572
          },
          {
            "timestamp": "2026-04-25 06:58:35,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12573
          },
          {
            "timestamp": "2026-04-25 06:58:35,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12574
          },
          {
            "timestamp": "2026-04-25 06:58:35,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12575
          },
          {
            "timestamp": "2026-04-25 06:58:35,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12576
          },
          {
            "timestamp": "2026-04-25 06:58:35,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12577
          },
          {
            "timestamp": "2026-04-25 06:58:35,204",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12578
          },
          {
            "timestamp": "2026-04-25 06:58:35,204",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12579
          },
          {
            "timestamp": "2026-04-25 06:58:35,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12580
          },
          {
            "timestamp": "2026-04-25 06:58:35,251",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12581
          },
          {
            "timestamp": "2026-04-25 06:58:35,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12582
          },
          {
            "timestamp": "2026-04-25 06:58:35,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12583
          },
          {
            "timestamp": "2026-04-25 06:58:35,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12584
          },
          {
            "timestamp": "2026-04-25 06:58:35,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12585
          },
          {
            "timestamp": "2026-04-25 06:58:35,313",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12586
          },
          {
            "timestamp": "2026-04-25 06:58:35,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12587
          },
          {
            "timestamp": "2026-04-25 06:58:35,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12588
          },
          {
            "timestamp": "2026-04-25 06:58:35,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12589
          },
          {
            "timestamp": "2026-04-25 06:58:35,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12590
          },
          {
            "timestamp": "2026-04-25 06:58:35,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12591
          },
          {
            "timestamp": "2026-04-25 06:58:35,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12592
          },
          {
            "timestamp": "2026-04-25 06:58:35,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "46"
              }
            ],
            "repeated": 0,
            "id": 12593
          },
          {
            "timestamp": "2026-04-25 06:58:35,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12594
          },
          {
            "timestamp": "2026-04-25 06:58:35,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12595
          },
          {
            "timestamp": "2026-04-25 06:58:35,422",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12596
          },
          {
            "timestamp": "2026-04-25 06:58:35,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12597
          },
          {
            "timestamp": "2026-04-25 06:58:35,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4"
              }
            ],
            "repeated": 0,
            "id": 12598
          },
          {
            "timestamp": "2026-04-25 06:58:35,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12599
          },
          {
            "timestamp": "2026-04-25 06:58:35,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12600
          },
          {
            "timestamp": "2026-04-25 06:58:35,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12601
          },
          {
            "timestamp": "2026-04-25 06:58:35,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12602
          },
          {
            "timestamp": "2026-04-25 06:58:35,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12603
          },
          {
            "timestamp": "2026-04-25 06:58:35,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12604
          },
          {
            "timestamp": "2026-04-25 06:58:35,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12605
          },
          {
            "timestamp": "2026-04-25 06:58:35,485",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076bc7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 12606
          },
          {
            "timestamp": "2026-04-25 06:58:35,501",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12607
          },
          {
            "timestamp": "2026-04-25 06:58:35,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12608
          },
          {
            "timestamp": "2026-04-25 06:58:35,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12609
          },
          {
            "timestamp": "2026-04-25 06:58:35,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12610
          },
          {
            "timestamp": "2026-04-25 06:58:35,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12611
          },
          {
            "timestamp": "2026-04-25 06:58:35,563",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12612
          },
          {
            "timestamp": "2026-04-25 06:58:35,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12613
          },
          {
            "timestamp": "2026-04-25 06:58:35,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12614
          },
          {
            "timestamp": "2026-04-25 06:58:35,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12615
          },
          {
            "timestamp": "2026-04-25 06:58:35,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12616
          },
          {
            "timestamp": "2026-04-25 06:58:35,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12617
          },
          {
            "timestamp": "2026-04-25 06:58:35,626",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12618
          },
          {
            "timestamp": "2026-04-25 06:58:35,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12619
          },
          {
            "timestamp": "2026-04-25 06:58:35,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12620
          },
          {
            "timestamp": "2026-04-25 06:58:35,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12621
          },
          {
            "timestamp": "2026-04-25 06:58:35,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12622
          },
          {
            "timestamp": "2026-04-25 06:58:35,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12623
          },
          {
            "timestamp": "2026-04-25 06:58:35,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12624
          },
          {
            "timestamp": "2026-04-25 06:58:35,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12625
          },
          {
            "timestamp": "2026-04-25 06:58:35,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 12626
          },
          {
            "timestamp": "2026-04-25 06:58:35,719",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12627
          },
          {
            "timestamp": "2026-04-25 06:58:35,719",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12628
          },
          {
            "timestamp": "2026-04-25 06:58:35,751",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12629
          },
          {
            "timestamp": "2026-04-25 06:58:35,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12630
          },
          {
            "timestamp": "2026-04-25 06:58:35,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12631
          },
          {
            "timestamp": "2026-04-25 06:58:35,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12632
          },
          {
            "timestamp": "2026-04-25 06:58:35,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12633
          },
          {
            "timestamp": "2026-04-25 06:58:35,751",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12634
          },
          {
            "timestamp": "2026-04-25 06:58:35,813",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12635
          },
          {
            "timestamp": "2026-04-25 06:58:35,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12636
          },
          {
            "timestamp": "2026-04-25 06:58:35,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12637
          },
          {
            "timestamp": "2026-04-25 06:58:35,813",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12638
          },
          {
            "timestamp": "2026-04-25 06:58:35,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12639
          },
          {
            "timestamp": "2026-04-25 06:58:35,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12640
          },
          {
            "timestamp": "2026-04-25 06:58:35,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12641
          },
          {
            "timestamp": "2026-04-25 06:58:35,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12642
          },
          {
            "timestamp": "2026-04-25 06:58:35,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12643
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12644
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0674b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 12645
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12646
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 12647
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12648
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000698",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1688"
              }
            ],
            "repeated": 0,
            "id": 12649
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 12650
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 12651
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000698"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 12652
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 12653
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 12654
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12655
          },
          {
            "timestamp": "2026-04-25 06:58:35,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12656
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 12657
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 12658
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 12659
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 12660
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 12661
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 12662
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1688"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 12663
          },
          {
            "timestamp": "2026-04-25 06:58:35,938",
            "thread_id": "800",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              }
            ],
            "repeated": 0,
            "id": 12664
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12665
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12666
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12667
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12668
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12669
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12670
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12671
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12672
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12673
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12674
          },
          {
            "timestamp": "2026-04-25 06:58:35,954",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 12675
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "8160",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1688"
              }
            ],
            "repeated": 0,
            "id": 12676
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "8160",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 12677
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "8160",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 12678
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 14,
            "id": 12679
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "6328",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 12680
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 12681
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12682
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12683
          },
          {
            "timestamp": "2026-04-25 06:58:35,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12684
          },
          {
            "timestamp": "2026-04-25 06:58:36,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12685
          },
          {
            "timestamp": "2026-04-25 06:58:36,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12686
          },
          {
            "timestamp": "2026-04-25 06:58:36,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12687
          },
          {
            "timestamp": "2026-04-25 06:58:36,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12688
          },
          {
            "timestamp": "2026-04-25 06:58:36,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12689
          },
          {
            "timestamp": "2026-04-25 06:58:36,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12690
          },
          {
            "timestamp": "2026-04-25 06:58:36,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12691
          },
          {
            "timestamp": "2026-04-25 06:58:36,079",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12692
          },
          {
            "timestamp": "2026-04-25 06:58:36,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12693
          },
          {
            "timestamp": "2026-04-25 06:58:36,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12694
          },
          {
            "timestamp": "2026-04-25 06:58:36,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12695
          },
          {
            "timestamp": "2026-04-25 06:58:36,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12696
          },
          {
            "timestamp": "2026-04-25 06:58:36,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12697
          },
          {
            "timestamp": "2026-04-25 06:58:36,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12698
          },
          {
            "timestamp": "2026-04-25 06:58:36,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12699
          },
          {
            "timestamp": "2026-04-25 06:58:36,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12700
          },
          {
            "timestamp": "2026-04-25 06:58:36,204",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12701
          },
          {
            "timestamp": "2026-04-25 06:58:36,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12702
          },
          {
            "timestamp": "2026-04-25 06:58:36,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12703
          },
          {
            "timestamp": "2026-04-25 06:58:36,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12704
          },
          {
            "timestamp": "2026-04-25 06:58:36,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12705
          },
          {
            "timestamp": "2026-04-25 06:58:36,235",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12706
          },
          {
            "timestamp": "2026-04-25 06:58:36,235",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12707
          },
          {
            "timestamp": "2026-04-25 06:58:36,266",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12708
          },
          {
            "timestamp": "2026-04-25 06:58:36,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12709
          },
          {
            "timestamp": "2026-04-25 06:58:36,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12710
          },
          {
            "timestamp": "2026-04-25 06:58:36,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12711
          },
          {
            "timestamp": "2026-04-25 06:58:36,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12712
          },
          {
            "timestamp": "2026-04-25 06:58:36,329",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12713
          },
          {
            "timestamp": "2026-04-25 06:58:36,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12714
          },
          {
            "timestamp": "2026-04-25 06:58:36,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12715
          },
          {
            "timestamp": "2026-04-25 06:58:36,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12716
          },
          {
            "timestamp": "2026-04-25 06:58:36,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12717
          },
          {
            "timestamp": "2026-04-25 06:58:36,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12718
          },
          {
            "timestamp": "2026-04-25 06:58:36,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12719
          },
          {
            "timestamp": "2026-04-25 06:58:36,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12720
          },
          {
            "timestamp": "2026-04-25 06:58:36,391",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12721
          },
          {
            "timestamp": "2026-04-25 06:58:36,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "31"
              }
            ],
            "repeated": 0,
            "id": 12722
          },
          {
            "timestamp": "2026-04-25 06:58:36,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12723
          },
          {
            "timestamp": "2026-04-25 06:58:36,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12724
          },
          {
            "timestamp": "2026-04-25 06:58:36,438",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12725
          },
          {
            "timestamp": "2026-04-25 06:58:36,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12726
          },
          {
            "timestamp": "2026-04-25 06:58:36,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12727
          },
          {
            "timestamp": "2026-04-25 06:58:36,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 12728
          },
          {
            "timestamp": "2026-04-25 06:58:36,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12729
          },
          {
            "timestamp": "2026-04-25 06:58:36,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12730
          },
          {
            "timestamp": "2026-04-25 06:58:36,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12731
          },
          {
            "timestamp": "2026-04-25 06:58:36,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12732
          },
          {
            "timestamp": "2026-04-25 06:58:36,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12733
          },
          {
            "timestamp": "2026-04-25 06:58:36,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12734
          },
          {
            "timestamp": "2026-04-25 06:58:36,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 12735
          },
          {
            "timestamp": "2026-04-25 06:58:36,516",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12736
          },
          {
            "timestamp": "2026-04-25 06:58:36,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12737
          },
          {
            "timestamp": "2026-04-25 06:58:36,579",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12738
          },
          {
            "timestamp": "2026-04-25 06:58:36,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12739
          },
          {
            "timestamp": "2026-04-25 06:58:36,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12740
          },
          {
            "timestamp": "2026-04-25 06:58:36,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12741
          },
          {
            "timestamp": "2026-04-25 06:58:36,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12742
          },
          {
            "timestamp": "2026-04-25 06:58:36,641",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12743
          },
          {
            "timestamp": "2026-04-25 06:58:36,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12744
          },
          {
            "timestamp": "2026-04-25 06:58:36,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12745
          },
          {
            "timestamp": "2026-04-25 06:58:36,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12746
          },
          {
            "timestamp": "2026-04-25 06:58:36,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12747
          },
          {
            "timestamp": "2026-04-25 06:58:36,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12748
          },
          {
            "timestamp": "2026-04-25 06:58:36,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12749
          },
          {
            "timestamp": "2026-04-25 06:58:36,704",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12750
          },
          {
            "timestamp": "2026-04-25 06:58:36,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12751
          },
          {
            "timestamp": "2026-04-25 06:58:36,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12752
          },
          {
            "timestamp": "2026-04-25 06:58:36,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12753
          },
          {
            "timestamp": "2026-04-25 06:58:36,751",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12754
          },
          {
            "timestamp": "2026-04-25 06:58:36,751",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12755
          },
          {
            "timestamp": "2026-04-25 06:58:36,766",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12756
          },
          {
            "timestamp": "2026-04-25 06:58:36,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12757
          },
          {
            "timestamp": "2026-04-25 06:58:36,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12758
          },
          {
            "timestamp": "2026-04-25 06:58:36,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12759
          },
          {
            "timestamp": "2026-04-25 06:58:36,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12760
          },
          {
            "timestamp": "2026-04-25 06:58:36,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12761
          },
          {
            "timestamp": "2026-04-25 06:58:36,829",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12762
          },
          {
            "timestamp": "2026-04-25 06:58:36,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12763
          },
          {
            "timestamp": "2026-04-25 06:58:36,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12764
          },
          {
            "timestamp": "2026-04-25 06:58:36,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12765
          },
          {
            "timestamp": "2026-04-25 06:58:36,891",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12766
          },
          {
            "timestamp": "2026-04-25 06:58:36,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12767
          },
          {
            "timestamp": "2026-04-25 06:58:36,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12768
          },
          {
            "timestamp": "2026-04-25 06:58:36,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12769
          },
          {
            "timestamp": "2026-04-25 06:58:36,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12770
          },
          {
            "timestamp": "2026-04-25 06:58:36,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12771
          },
          {
            "timestamp": "2026-04-25 06:58:36,954",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12772
          },
          {
            "timestamp": "2026-04-25 06:58:36,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12773
          },
          {
            "timestamp": "2026-04-25 06:58:36,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12774
          },
          {
            "timestamp": "2026-04-25 06:58:36,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12775
          },
          {
            "timestamp": "2026-04-25 06:58:36,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12776
          },
          {
            "timestamp": "2026-04-25 06:58:37,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12777
          },
          {
            "timestamp": "2026-04-25 06:58:37,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12778
          },
          {
            "timestamp": "2026-04-25 06:58:37,016",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12779
          },
          {
            "timestamp": "2026-04-25 06:58:37,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12780
          },
          {
            "timestamp": "2026-04-25 06:58:37,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12781
          },
          {
            "timestamp": "2026-04-25 06:58:37,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12782
          },
          {
            "timestamp": "2026-04-25 06:58:37,079",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12783
          },
          {
            "timestamp": "2026-04-25 06:58:37,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12784
          },
          {
            "timestamp": "2026-04-25 06:58:37,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12785
          },
          {
            "timestamp": "2026-04-25 06:58:37,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12786
          },
          {
            "timestamp": "2026-04-25 06:58:37,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12787
          },
          {
            "timestamp": "2026-04-25 06:58:37,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12788
          },
          {
            "timestamp": "2026-04-25 06:58:37,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12789
          },
          {
            "timestamp": "2026-04-25 06:58:37,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12790
          },
          {
            "timestamp": "2026-04-25 06:58:37,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12791
          },
          {
            "timestamp": "2026-04-25 06:58:37,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12792
          },
          {
            "timestamp": "2026-04-25 06:58:37,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12793
          },
          {
            "timestamp": "2026-04-25 06:58:37,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12794
          },
          {
            "timestamp": "2026-04-25 06:58:37,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12795
          },
          {
            "timestamp": "2026-04-25 06:58:37,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12796
          },
          {
            "timestamp": "2026-04-25 06:58:37,204",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12797
          },
          {
            "timestamp": "2026-04-25 06:58:37,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12798
          },
          {
            "timestamp": "2026-04-25 06:58:37,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12799
          },
          {
            "timestamp": "2026-04-25 06:58:37,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12800
          },
          {
            "timestamp": "2026-04-25 06:58:37,251",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12801
          },
          {
            "timestamp": "2026-04-25 06:58:37,251",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12802
          },
          {
            "timestamp": "2026-04-25 06:58:37,266",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12803
          },
          {
            "timestamp": "2026-04-25 06:58:37,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12804
          },
          {
            "timestamp": "2026-04-25 06:58:37,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12805
          },
          {
            "timestamp": "2026-04-25 06:58:37,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12806
          },
          {
            "timestamp": "2026-04-25 06:58:37,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12807
          },
          {
            "timestamp": "2026-04-25 06:58:37,329",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12808
          },
          {
            "timestamp": "2026-04-25 06:58:37,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12809
          },
          {
            "timestamp": "2026-04-25 06:58:37,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12810
          },
          {
            "timestamp": "2026-04-25 06:58:37,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12811
          },
          {
            "timestamp": "2026-04-25 06:58:37,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12812
          },
          {
            "timestamp": "2026-04-25 06:58:37,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12813
          },
          {
            "timestamp": "2026-04-25 06:58:37,391",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12814
          },
          {
            "timestamp": "2026-04-25 06:58:37,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 12815
          },
          {
            "timestamp": "2026-04-25 06:58:37,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12816
          },
          {
            "timestamp": "2026-04-25 06:58:37,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12817
          },
          {
            "timestamp": "2026-04-25 06:58:37,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12818
          },
          {
            "timestamp": "2026-04-25 06:58:37,454",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12819
          },
          {
            "timestamp": "2026-04-25 06:58:37,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12820
          },
          {
            "timestamp": "2026-04-25 06:58:37,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12821
          },
          {
            "timestamp": "2026-04-25 06:58:37,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12822
          },
          {
            "timestamp": "2026-04-25 06:58:37,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12823
          },
          {
            "timestamp": "2026-04-25 06:58:37,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12824
          },
          {
            "timestamp": "2026-04-25 06:58:37,516",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12825
          },
          {
            "timestamp": "2026-04-25 06:58:37,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12826
          },
          {
            "timestamp": "2026-04-25 06:58:37,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12827
          },
          {
            "timestamp": "2026-04-25 06:58:37,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12828
          },
          {
            "timestamp": "2026-04-25 06:58:37,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12829
          },
          {
            "timestamp": "2026-04-25 06:58:37,579",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12830
          },
          {
            "timestamp": "2026-04-25 06:58:37,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12831
          },
          {
            "timestamp": "2026-04-25 06:58:37,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12832
          },
          {
            "timestamp": "2026-04-25 06:58:37,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12833
          },
          {
            "timestamp": "2026-04-25 06:58:37,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12834
          },
          {
            "timestamp": "2026-04-25 06:58:37,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12835
          },
          {
            "timestamp": "2026-04-25 06:58:37,641",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12836
          },
          {
            "timestamp": "2026-04-25 06:58:37,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12837
          },
          {
            "timestamp": "2026-04-25 06:58:37,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12838
          },
          {
            "timestamp": "2026-04-25 06:58:37,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12839
          },
          {
            "timestamp": "2026-04-25 06:58:37,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12840
          },
          {
            "timestamp": "2026-04-25 06:58:37,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12841
          },
          {
            "timestamp": "2026-04-25 06:58:37,704",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12842
          },
          {
            "timestamp": "2026-04-25 06:58:37,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12843
          },
          {
            "timestamp": "2026-04-25 06:58:37,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12844
          },
          {
            "timestamp": "2026-04-25 06:58:37,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12845
          },
          {
            "timestamp": "2026-04-25 06:58:37,766",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12846
          },
          {
            "timestamp": "2026-04-25 06:58:37,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12847
          },
          {
            "timestamp": "2026-04-25 06:58:37,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12848
          },
          {
            "timestamp": "2026-04-25 06:58:37,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12849
          },
          {
            "timestamp": "2026-04-25 06:58:37,766",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12850
          },
          {
            "timestamp": "2026-04-25 06:58:37,766",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12851
          },
          {
            "timestamp": "2026-04-25 06:58:37,829",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12852
          },
          {
            "timestamp": "2026-04-25 06:58:37,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12853
          },
          {
            "timestamp": "2026-04-25 06:58:37,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12854
          },
          {
            "timestamp": "2026-04-25 06:58:37,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12855
          },
          {
            "timestamp": "2026-04-25 06:58:37,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12856
          },
          {
            "timestamp": "2026-04-25 06:58:37,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12857
          },
          {
            "timestamp": "2026-04-25 06:58:37,891",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12858
          },
          {
            "timestamp": "2026-04-25 06:58:37,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12859
          },
          {
            "timestamp": "2026-04-25 06:58:37,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12860
          },
          {
            "timestamp": "2026-04-25 06:58:37,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12861
          },
          {
            "timestamp": "2026-04-25 06:58:37,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12862
          },
          {
            "timestamp": "2026-04-25 06:58:37,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12863
          },
          {
            "timestamp": "2026-04-25 06:58:37,954",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12864
          },
          {
            "timestamp": "2026-04-25 06:58:37,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12865
          },
          {
            "timestamp": "2026-04-25 06:58:37,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12866
          },
          {
            "timestamp": "2026-04-25 06:58:37,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12867
          },
          {
            "timestamp": "2026-04-25 06:58:38,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12868
          },
          {
            "timestamp": "2026-04-25 06:58:38,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12869
          },
          {
            "timestamp": "2026-04-25 06:58:38,016",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12870
          },
          {
            "timestamp": "2026-04-25 06:58:38,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12871
          },
          {
            "timestamp": "2026-04-25 06:58:38,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12872
          },
          {
            "timestamp": "2026-04-25 06:58:38,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12873
          },
          {
            "timestamp": "2026-04-25 06:58:38,079",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12874
          },
          {
            "timestamp": "2026-04-25 06:58:38,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12875
          },
          {
            "timestamp": "2026-04-25 06:58:38,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12876
          },
          {
            "timestamp": "2026-04-25 06:58:38,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12877
          },
          {
            "timestamp": "2026-04-25 06:58:38,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12878
          },
          {
            "timestamp": "2026-04-25 06:58:38,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12879
          },
          {
            "timestamp": "2026-04-25 06:58:38,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12880
          },
          {
            "timestamp": "2026-04-25 06:58:38,141",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12881
          },
          {
            "timestamp": "2026-04-25 06:58:38,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12882
          },
          {
            "timestamp": "2026-04-25 06:58:38,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12883
          },
          {
            "timestamp": "2026-04-25 06:58:38,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12884
          },
          {
            "timestamp": "2026-04-25 06:58:38,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12885
          },
          {
            "timestamp": "2026-04-25 06:58:38,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12886
          },
          {
            "timestamp": "2026-04-25 06:58:38,204",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12887
          },
          {
            "timestamp": "2026-04-25 06:58:38,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12888
          },
          {
            "timestamp": "2026-04-25 06:58:38,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12889
          },
          {
            "timestamp": "2026-04-25 06:58:38,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12890
          },
          {
            "timestamp": "2026-04-25 06:58:38,266",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12891
          },
          {
            "timestamp": "2026-04-25 06:58:38,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12892
          },
          {
            "timestamp": "2026-04-25 06:58:38,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12893
          },
          {
            "timestamp": "2026-04-25 06:58:38,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12894
          },
          {
            "timestamp": "2026-04-25 06:58:38,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12895
          },
          {
            "timestamp": "2026-04-25 06:58:38,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12896
          },
          {
            "timestamp": "2026-04-25 06:58:38,282",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12897
          },
          {
            "timestamp": "2026-04-25 06:58:38,282",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12898
          },
          {
            "timestamp": "2026-04-25 06:58:38,329",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12899
          },
          {
            "timestamp": "2026-04-25 06:58:38,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12900
          },
          {
            "timestamp": "2026-04-25 06:58:38,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12901
          },
          {
            "timestamp": "2026-04-25 06:58:38,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12902
          },
          {
            "timestamp": "2026-04-25 06:58:38,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12903
          },
          {
            "timestamp": "2026-04-25 06:58:38,391",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12904
          },
          {
            "timestamp": "2026-04-25 06:58:38,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12905
          },
          {
            "timestamp": "2026-04-25 06:58:38,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12906
          },
          {
            "timestamp": "2026-04-25 06:58:38,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12907
          },
          {
            "timestamp": "2026-04-25 06:58:38,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12908
          },
          {
            "timestamp": "2026-04-25 06:58:38,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12909
          },
          {
            "timestamp": "2026-04-25 06:58:38,454",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12910
          },
          {
            "timestamp": "2026-04-25 06:58:38,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12911
          },
          {
            "timestamp": "2026-04-25 06:58:38,454",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12912
          },
          {
            "timestamp": "2026-04-25 06:58:38,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12913
          },
          {
            "timestamp": "2026-04-25 06:58:38,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12914
          },
          {
            "timestamp": "2026-04-25 06:58:38,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12915
          },
          {
            "timestamp": "2026-04-25 06:58:38,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12916
          },
          {
            "timestamp": "2026-04-25 06:58:38,516",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12917
          },
          {
            "timestamp": "2026-04-25 06:58:38,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12918
          },
          {
            "timestamp": "2026-04-25 06:58:38,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12919
          },
          {
            "timestamp": "2026-04-25 06:58:38,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12920
          },
          {
            "timestamp": "2026-04-25 06:58:38,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12921
          },
          {
            "timestamp": "2026-04-25 06:58:38,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12922
          },
          {
            "timestamp": "2026-04-25 06:58:38,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12923
          },
          {
            "timestamp": "2026-04-25 06:58:38,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12924
          },
          {
            "timestamp": "2026-04-25 06:58:38,579",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12925
          },
          {
            "timestamp": "2026-04-25 06:58:38,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12926
          },
          {
            "timestamp": "2026-04-25 06:58:38,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12927
          },
          {
            "timestamp": "2026-04-25 06:58:38,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12928
          },
          {
            "timestamp": "2026-04-25 06:58:38,641",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12929
          },
          {
            "timestamp": "2026-04-25 06:58:38,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12930
          },
          {
            "timestamp": "2026-04-25 06:58:38,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12931
          },
          {
            "timestamp": "2026-04-25 06:58:38,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12932
          },
          {
            "timestamp": "2026-04-25 06:58:38,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12933
          },
          {
            "timestamp": "2026-04-25 06:58:38,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12934
          },
          {
            "timestamp": "2026-04-25 06:58:38,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12935
          },
          {
            "timestamp": "2026-04-25 06:58:38,704",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12936
          },
          {
            "timestamp": "2026-04-25 06:58:38,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12937
          },
          {
            "timestamp": "2026-04-25 06:58:38,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12938
          },
          {
            "timestamp": "2026-04-25 06:58:38,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12939
          },
          {
            "timestamp": "2026-04-25 06:58:38,766",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12940
          },
          {
            "timestamp": "2026-04-25 06:58:38,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12941
          },
          {
            "timestamp": "2026-04-25 06:58:38,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12942
          },
          {
            "timestamp": "2026-04-25 06:58:38,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12943
          },
          {
            "timestamp": "2026-04-25 06:58:38,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12944
          },
          {
            "timestamp": "2026-04-25 06:58:38,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12945
          },
          {
            "timestamp": "2026-04-25 06:58:38,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12946
          },
          {
            "timestamp": "2026-04-25 06:58:38,829",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12947
          },
          {
            "timestamp": "2026-04-25 06:58:38,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12948
          },
          {
            "timestamp": "2026-04-25 06:58:38,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12949
          },
          {
            "timestamp": "2026-04-25 06:58:38,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12950
          },
          {
            "timestamp": "2026-04-25 06:58:38,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12951
          },
          {
            "timestamp": "2026-04-25 06:58:38,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12952
          },
          {
            "timestamp": "2026-04-25 06:58:38,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12953
          },
          {
            "timestamp": "2026-04-25 06:58:38,891",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12954
          },
          {
            "timestamp": "2026-04-25 06:58:38,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12955
          },
          {
            "timestamp": "2026-04-25 06:58:38,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12956
          },
          {
            "timestamp": "2026-04-25 06:58:38,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12957
          },
          {
            "timestamp": "2026-04-25 06:58:38,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12958
          },
          {
            "timestamp": "2026-04-25 06:58:38,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12959
          },
          {
            "timestamp": "2026-04-25 06:58:38,954",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12960
          },
          {
            "timestamp": "2026-04-25 06:58:38,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12961
          },
          {
            "timestamp": "2026-04-25 06:58:38,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12962
          },
          {
            "timestamp": "2026-04-25 06:58:38,954",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12963
          },
          {
            "timestamp": "2026-04-25 06:58:39,016",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12964
          },
          {
            "timestamp": "2026-04-25 06:58:39,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12965
          },
          {
            "timestamp": "2026-04-25 06:58:39,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12966
          },
          {
            "timestamp": "2026-04-25 06:58:39,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12967
          },
          {
            "timestamp": "2026-04-25 06:58:39,079",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12968
          },
          {
            "timestamp": "2026-04-25 06:58:39,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12969
          },
          {
            "timestamp": "2026-04-25 06:58:39,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12970
          },
          {
            "timestamp": "2026-04-25 06:58:39,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12971
          },
          {
            "timestamp": "2026-04-25 06:58:39,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12972
          },
          {
            "timestamp": "2026-04-25 06:58:39,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12973
          },
          {
            "timestamp": "2026-04-25 06:58:39,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12974
          },
          {
            "timestamp": "2026-04-25 06:58:39,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12975
          },
          {
            "timestamp": "2026-04-25 06:58:39,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12976
          },
          {
            "timestamp": "2026-04-25 06:58:39,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12977
          },
          {
            "timestamp": "2026-04-25 06:58:39,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12978
          },
          {
            "timestamp": "2026-04-25 06:58:39,204",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12979
          },
          {
            "timestamp": "2026-04-25 06:58:39,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12980
          },
          {
            "timestamp": "2026-04-25 06:58:39,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12981
          },
          {
            "timestamp": "2026-04-25 06:58:39,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12982
          },
          {
            "timestamp": "2026-04-25 06:58:39,266",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12983
          },
          {
            "timestamp": "2026-04-25 06:58:39,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12984
          },
          {
            "timestamp": "2026-04-25 06:58:39,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12985
          },
          {
            "timestamp": "2026-04-25 06:58:39,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12986
          },
          {
            "timestamp": "2026-04-25 06:58:39,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12987
          },
          {
            "timestamp": "2026-04-25 06:58:39,313",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 12988
          },
          {
            "timestamp": "2026-04-25 06:58:39,313",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 12989
          },
          {
            "timestamp": "2026-04-25 06:58:39,329",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12990
          },
          {
            "timestamp": "2026-04-25 06:58:39,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12991
          },
          {
            "timestamp": "2026-04-25 06:58:39,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12992
          },
          {
            "timestamp": "2026-04-25 06:58:39,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12993
          },
          {
            "timestamp": "2026-04-25 06:58:39,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12994
          },
          {
            "timestamp": "2026-04-25 06:58:39,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12995
          },
          {
            "timestamp": "2026-04-25 06:58:39,391",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 12996
          },
          {
            "timestamp": "2026-04-25 06:58:39,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 12997
          },
          {
            "timestamp": "2026-04-25 06:58:39,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 12998
          },
          {
            "timestamp": "2026-04-25 06:58:39,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 12999
          },
          {
            "timestamp": "2026-04-25 06:58:39,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13000
          },
          {
            "timestamp": "2026-04-25 06:58:39,454",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13001
          },
          {
            "timestamp": "2026-04-25 06:58:39,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13002
          },
          {
            "timestamp": "2026-04-25 06:58:39,454",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13003
          },
          {
            "timestamp": "2026-04-25 06:58:39,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13004
          },
          {
            "timestamp": "2026-04-25 06:58:39,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13005
          },
          {
            "timestamp": "2026-04-25 06:58:39,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13006
          },
          {
            "timestamp": "2026-04-25 06:58:39,516",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13007
          },
          {
            "timestamp": "2026-04-25 06:58:39,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13008
          },
          {
            "timestamp": "2026-04-25 06:58:39,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13009
          },
          {
            "timestamp": "2026-04-25 06:58:39,516",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13010
          },
          {
            "timestamp": "2026-04-25 06:58:39,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13011
          },
          {
            "timestamp": "2026-04-25 06:58:39,516",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13012
          },
          {
            "timestamp": "2026-04-25 06:58:39,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13013
          },
          {
            "timestamp": "2026-04-25 06:58:39,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13014
          },
          {
            "timestamp": "2026-04-25 06:58:39,579",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13015
          },
          {
            "timestamp": "2026-04-25 06:58:39,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13016
          },
          {
            "timestamp": "2026-04-25 06:58:39,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13017
          },
          {
            "timestamp": "2026-04-25 06:58:39,579",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13018
          },
          {
            "timestamp": "2026-04-25 06:58:39,641",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13019
          },
          {
            "timestamp": "2026-04-25 06:58:39,641",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13020
          },
          {
            "timestamp": "2026-04-25 06:58:39,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13021
          },
          {
            "timestamp": "2026-04-25 06:58:39,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13022
          },
          {
            "timestamp": "2026-04-25 06:58:39,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13023
          },
          {
            "timestamp": "2026-04-25 06:58:39,704",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13024
          },
          {
            "timestamp": "2026-04-25 06:58:39,704",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13025
          },
          {
            "timestamp": "2026-04-25 06:58:39,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13026
          },
          {
            "timestamp": "2026-04-25 06:58:39,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13027
          },
          {
            "timestamp": "2026-04-25 06:58:39,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13028
          },
          {
            "timestamp": "2026-04-25 06:58:39,766",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13029
          },
          {
            "timestamp": "2026-04-25 06:58:39,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13030
          },
          {
            "timestamp": "2026-04-25 06:58:39,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13031
          },
          {
            "timestamp": "2026-04-25 06:58:39,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13032
          },
          {
            "timestamp": "2026-04-25 06:58:39,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13033
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13034
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13035
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13036
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13037
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13038
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13039
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13040
          },
          {
            "timestamp": "2026-04-25 06:58:39,829",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13041
          },
          {
            "timestamp": "2026-04-25 06:58:39,891",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13042
          },
          {
            "timestamp": "2026-04-25 06:58:39,891",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13043
          },
          {
            "timestamp": "2026-04-25 06:58:39,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13044
          },
          {
            "timestamp": "2026-04-25 06:58:39,891",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13045
          },
          {
            "timestamp": "2026-04-25 06:58:39,954",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13046
          },
          {
            "timestamp": "2026-04-25 06:58:39,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13047
          },
          {
            "timestamp": "2026-04-25 06:58:39,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13048
          },
          {
            "timestamp": "2026-04-25 06:58:39,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13049
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13050
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0676b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 13051
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13052
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13053
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13054
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13055
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 13056
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13057
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000006d4",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1748"
              }
            ],
            "repeated": 0,
            "id": 13058
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1748"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 13059
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1748"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 13060
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 13061
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13062
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000006d4"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 13063
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13064
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13065
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1748"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 13066
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13067
          },
          {
            "timestamp": "2026-04-25 06:58:39,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13068
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1748"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 13069
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 13070
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 13071
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 13072
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 13073
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 13074
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1748"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 13075
          },
          {
            "timestamp": "2026-04-25 06:58:40,001",
            "thread_id": "8160",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1748"
              }
            ],
            "repeated": 0,
            "id": 13076
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13077
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13078
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13079
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13080
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13081
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13082
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13083
          },
          {
            "timestamp": "2026-04-25 06:58:40,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13084
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 13085
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "8160",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1748"
              }
            ],
            "repeated": 0,
            "id": 13086
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "8160",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 13087
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "8160",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 13088
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13089
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "6328",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 13090
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "8160",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 14,
            "id": 13091
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13092
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13093
          },
          {
            "timestamp": "2026-04-25 06:58:40,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13094
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "800",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006ac"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2668"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "1128"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 13095
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "800",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x000006ac",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc2668"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "1128"
              }
            ],
            "repeated": 0,
            "id": 13096
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "800",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006ac"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "1128"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 13097
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "1128",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 13098
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "1128",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13099
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "1128",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 13100
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "1128",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 13101
          },
          {
            "timestamp": "2026-04-25 06:58:40,047",
            "thread_id": "1128",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x00b11000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 13102
          },
          {
            "timestamp": "2026-04-25 06:58:40,079",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13103
          },
          {
            "timestamp": "2026-04-25 06:58:40,079",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13104
          },
          {
            "timestamp": "2026-04-25 06:58:40,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13105
          },
          {
            "timestamp": "2026-04-25 06:58:40,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13106
          },
          {
            "timestamp": "2026-04-25 06:58:40,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13107
          },
          {
            "timestamp": "2026-04-25 06:58:40,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13108
          },
          {
            "timestamp": "2026-04-25 06:58:40,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13109
          },
          {
            "timestamp": "2026-04-25 06:58:40,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13110
          },
          {
            "timestamp": "2026-04-25 06:58:40,141",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13111
          },
          {
            "timestamp": "2026-04-25 06:58:40,204",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13112
          },
          {
            "timestamp": "2026-04-25 06:58:40,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13113
          },
          {
            "timestamp": "2026-04-25 06:58:40,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13114
          },
          {
            "timestamp": "2026-04-25 06:58:40,204",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13115
          },
          {
            "timestamp": "2026-04-25 06:58:40,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13116
          },
          {
            "timestamp": "2026-04-25 06:58:40,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13117
          },
          {
            "timestamp": "2026-04-25 06:58:40,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13118
          },
          {
            "timestamp": "2026-04-25 06:58:40,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13119
          },
          {
            "timestamp": "2026-04-25 06:58:40,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13120
          },
          {
            "timestamp": "2026-04-25 06:58:40,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13121
          },
          {
            "timestamp": "2026-04-25 06:58:40,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13122
          },
          {
            "timestamp": "2026-04-25 06:58:40,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13123
          },
          {
            "timestamp": "2026-04-25 06:58:40,344",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13124
          },
          {
            "timestamp": "2026-04-25 06:58:40,344",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13125
          },
          {
            "timestamp": "2026-04-25 06:58:40,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13126
          },
          {
            "timestamp": "2026-04-25 06:58:40,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13127
          },
          {
            "timestamp": "2026-04-25 06:58:40,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13128
          },
          {
            "timestamp": "2026-04-25 06:58:40,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13129
          },
          {
            "timestamp": "2026-04-25 06:58:40,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13130
          },
          {
            "timestamp": "2026-04-25 06:58:40,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 13131
          },
          {
            "timestamp": "2026-04-25 06:58:40,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13132
          },
          {
            "timestamp": "2026-04-25 06:58:40,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13133
          },
          {
            "timestamp": "2026-04-25 06:58:40,469",
            "thread_id": "1416",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13134
          },
          {
            "timestamp": "2026-04-25 06:58:40,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13135
          },
          {
            "timestamp": "2026-04-25 06:58:40,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13136
          },
          {
            "timestamp": "2026-04-25 06:58:40,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13137
          },
          {
            "timestamp": "2026-04-25 06:58:40,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13138
          },
          {
            "timestamp": "2026-04-25 06:58:40,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13139
          },
          {
            "timestamp": "2026-04-25 06:58:40,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13140
          },
          {
            "timestamp": "2026-04-25 06:58:40,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13141
          },
          {
            "timestamp": "2026-04-25 06:58:40,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13142
          },
          {
            "timestamp": "2026-04-25 06:58:40,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13143
          },
          {
            "timestamp": "2026-04-25 06:58:40,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13144
          },
          {
            "timestamp": "2026-04-25 06:58:40,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13145
          },
          {
            "timestamp": "2026-04-25 06:58:40,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13146
          },
          {
            "timestamp": "2026-04-25 06:58:40,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13147
          },
          {
            "timestamp": "2026-04-25 06:58:40,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13148
          },
          {
            "timestamp": "2026-04-25 06:58:40,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13149
          },
          {
            "timestamp": "2026-04-25 06:58:40,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13150
          },
          {
            "timestamp": "2026-04-25 06:58:40,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13151
          },
          {
            "timestamp": "2026-04-25 06:58:40,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13152
          },
          {
            "timestamp": "2026-04-25 06:58:40,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13153
          },
          {
            "timestamp": "2026-04-25 06:58:40,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13154
          },
          {
            "timestamp": "2026-04-25 06:58:40,719",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13155
          },
          {
            "timestamp": "2026-04-25 06:58:40,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13156
          },
          {
            "timestamp": "2026-04-25 06:58:40,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13157
          },
          {
            "timestamp": "2026-04-25 06:58:40,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13158
          },
          {
            "timestamp": "2026-04-25 06:58:40,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13159
          },
          {
            "timestamp": "2026-04-25 06:58:40,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13160
          },
          {
            "timestamp": "2026-04-25 06:58:40,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13161
          },
          {
            "timestamp": "2026-04-25 06:58:40,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13162
          },
          {
            "timestamp": "2026-04-25 06:58:40,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13163
          },
          {
            "timestamp": "2026-04-25 06:58:40,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13164
          },
          {
            "timestamp": "2026-04-25 06:58:40,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13165
          },
          {
            "timestamp": "2026-04-25 06:58:40,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13166
          },
          {
            "timestamp": "2026-04-25 06:58:40,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13167
          },
          {
            "timestamp": "2026-04-25 06:58:40,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13168
          },
          {
            "timestamp": "2026-04-25 06:58:40,860",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13169
          },
          {
            "timestamp": "2026-04-25 06:58:40,860",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13170
          },
          {
            "timestamp": "2026-04-25 06:58:40,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13171
          },
          {
            "timestamp": "2026-04-25 06:58:40,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13172
          },
          {
            "timestamp": "2026-04-25 06:58:40,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13173
          },
          {
            "timestamp": "2026-04-25 06:58:40,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13174
          },
          {
            "timestamp": "2026-04-25 06:58:40,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13175
          },
          {
            "timestamp": "2026-04-25 06:58:40,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13176
          },
          {
            "timestamp": "2026-04-25 06:58:40,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13177
          },
          {
            "timestamp": "2026-04-25 06:58:40,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13178
          },
          {
            "timestamp": "2026-04-25 06:58:40,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13179
          },
          {
            "timestamp": "2026-04-25 06:58:41,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13180
          },
          {
            "timestamp": "2026-04-25 06:58:41,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13181
          },
          {
            "timestamp": "2026-04-25 06:58:41,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13182
          },
          {
            "timestamp": "2026-04-25 06:58:41,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13183
          },
          {
            "timestamp": "2026-04-25 06:58:41,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13184
          },
          {
            "timestamp": "2026-04-25 06:58:41,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13185
          },
          {
            "timestamp": "2026-04-25 06:58:41,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13186
          },
          {
            "timestamp": "2026-04-25 06:58:41,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13187
          },
          {
            "timestamp": "2026-04-25 06:58:41,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13188
          },
          {
            "timestamp": "2026-04-25 06:58:41,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13189
          },
          {
            "timestamp": "2026-04-25 06:58:41,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13190
          },
          {
            "timestamp": "2026-04-25 06:58:41,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13191
          },
          {
            "timestamp": "2026-04-25 06:58:41,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13192
          },
          {
            "timestamp": "2026-04-25 06:58:41,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13193
          },
          {
            "timestamp": "2026-04-25 06:58:41,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13194
          },
          {
            "timestamp": "2026-04-25 06:58:41,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13195
          },
          {
            "timestamp": "2026-04-25 06:58:41,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13196
          },
          {
            "timestamp": "2026-04-25 06:58:41,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13197
          },
          {
            "timestamp": "2026-04-25 06:58:41,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13198
          },
          {
            "timestamp": "2026-04-25 06:58:41,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13199
          },
          {
            "timestamp": "2026-04-25 06:58:41,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13200
          },
          {
            "timestamp": "2026-04-25 06:58:41,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13201
          },
          {
            "timestamp": "2026-04-25 06:58:41,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13202
          },
          {
            "timestamp": "2026-04-25 06:58:41,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13203
          },
          {
            "timestamp": "2026-04-25 06:58:41,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13204
          },
          {
            "timestamp": "2026-04-25 06:58:41,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13205
          },
          {
            "timestamp": "2026-04-25 06:58:41,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13206
          },
          {
            "timestamp": "2026-04-25 06:58:41,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13207
          },
          {
            "timestamp": "2026-04-25 06:58:41,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13208
          },
          {
            "timestamp": "2026-04-25 06:58:41,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13209
          },
          {
            "timestamp": "2026-04-25 06:58:41,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13210
          },
          {
            "timestamp": "2026-04-25 06:58:41,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13211
          },
          {
            "timestamp": "2026-04-25 06:58:41,376",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13212
          },
          {
            "timestamp": "2026-04-25 06:58:41,376",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13213
          },
          {
            "timestamp": "2026-04-25 06:58:41,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13214
          },
          {
            "timestamp": "2026-04-25 06:58:41,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13215
          },
          {
            "timestamp": "2026-04-25 06:58:41,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13216
          },
          {
            "timestamp": "2026-04-25 06:58:41,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13217
          },
          {
            "timestamp": "2026-04-25 06:58:41,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13218
          },
          {
            "timestamp": "2026-04-25 06:58:41,469",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13219
          },
          {
            "timestamp": "2026-04-25 06:58:41,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13220
          },
          {
            "timestamp": "2026-04-25 06:58:41,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13221
          },
          {
            "timestamp": "2026-04-25 06:58:41,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13222
          },
          {
            "timestamp": "2026-04-25 06:58:41,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13223
          },
          {
            "timestamp": "2026-04-25 06:58:41,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13224
          },
          {
            "timestamp": "2026-04-25 06:58:41,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13225
          },
          {
            "timestamp": "2026-04-25 06:58:41,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13226
          },
          {
            "timestamp": "2026-04-25 06:58:41,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13227
          },
          {
            "timestamp": "2026-04-25 06:58:41,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13228
          },
          {
            "timestamp": "2026-04-25 06:58:41,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13229
          },
          {
            "timestamp": "2026-04-25 06:58:41,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13230
          },
          {
            "timestamp": "2026-04-25 06:58:41,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13231
          },
          {
            "timestamp": "2026-04-25 06:58:41,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13232
          },
          {
            "timestamp": "2026-04-25 06:58:41,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13233
          },
          {
            "timestamp": "2026-04-25 06:58:41,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13234
          },
          {
            "timestamp": "2026-04-25 06:58:41,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13235
          },
          {
            "timestamp": "2026-04-25 06:58:41,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13236
          },
          {
            "timestamp": "2026-04-25 06:58:41,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13237
          },
          {
            "timestamp": "2026-04-25 06:58:41,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13238
          },
          {
            "timestamp": "2026-04-25 06:58:41,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13239
          },
          {
            "timestamp": "2026-04-25 06:58:41,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13240
          },
          {
            "timestamp": "2026-04-25 06:58:41,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13241
          },
          {
            "timestamp": "2026-04-25 06:58:41,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13242
          },
          {
            "timestamp": "2026-04-25 06:58:41,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13243
          },
          {
            "timestamp": "2026-04-25 06:58:41,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13244
          },
          {
            "timestamp": "2026-04-25 06:58:41,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13245
          },
          {
            "timestamp": "2026-04-25 06:58:41,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13246
          },
          {
            "timestamp": "2026-04-25 06:58:41,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13247
          },
          {
            "timestamp": "2026-04-25 06:58:41,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13248
          },
          {
            "timestamp": "2026-04-25 06:58:41,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13249
          },
          {
            "timestamp": "2026-04-25 06:58:41,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13250
          },
          {
            "timestamp": "2026-04-25 06:58:41,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13251
          },
          {
            "timestamp": "2026-04-25 06:58:41,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13252
          },
          {
            "timestamp": "2026-04-25 06:58:41,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13253
          },
          {
            "timestamp": "2026-04-25 06:58:41,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13254
          },
          {
            "timestamp": "2026-04-25 06:58:41,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13255
          },
          {
            "timestamp": "2026-04-25 06:58:41,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13256
          },
          {
            "timestamp": "2026-04-25 06:58:41,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13257
          },
          {
            "timestamp": "2026-04-25 06:58:41,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13258
          },
          {
            "timestamp": "2026-04-25 06:58:41,891",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13259
          },
          {
            "timestamp": "2026-04-25 06:58:41,891",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13260
          },
          {
            "timestamp": "2026-04-25 06:58:41,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13261
          },
          {
            "timestamp": "2026-04-25 06:58:41,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13262
          },
          {
            "timestamp": "2026-04-25 06:58:41,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13263
          },
          {
            "timestamp": "2026-04-25 06:58:41,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13264
          },
          {
            "timestamp": "2026-04-25 06:58:41,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13265
          },
          {
            "timestamp": "2026-04-25 06:58:41,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13266
          },
          {
            "timestamp": "2026-04-25 06:58:41,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13267
          },
          {
            "timestamp": "2026-04-25 06:58:41,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13268
          },
          {
            "timestamp": "2026-04-25 06:58:41,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13269
          },
          {
            "timestamp": "2026-04-25 06:58:42,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13270
          },
          {
            "timestamp": "2026-04-25 06:58:42,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13271
          },
          {
            "timestamp": "2026-04-25 06:58:42,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13272
          },
          {
            "timestamp": "2026-04-25 06:58:42,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13273
          },
          {
            "timestamp": "2026-04-25 06:58:42,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13274
          },
          {
            "timestamp": "2026-04-25 06:58:42,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13275
          },
          {
            "timestamp": "2026-04-25 06:58:42,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13276
          },
          {
            "timestamp": "2026-04-25 06:58:42,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13277
          },
          {
            "timestamp": "2026-04-25 06:58:42,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13278
          },
          {
            "timestamp": "2026-04-25 06:58:42,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13279
          },
          {
            "timestamp": "2026-04-25 06:58:42,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13280
          },
          {
            "timestamp": "2026-04-25 06:58:42,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13281
          },
          {
            "timestamp": "2026-04-25 06:58:42,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13282
          },
          {
            "timestamp": "2026-04-25 06:58:42,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13283
          },
          {
            "timestamp": "2026-04-25 06:58:42,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13284
          },
          {
            "timestamp": "2026-04-25 06:58:42,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13285
          },
          {
            "timestamp": "2026-04-25 06:58:42,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13286
          },
          {
            "timestamp": "2026-04-25 06:58:42,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13287
          },
          {
            "timestamp": "2026-04-25 06:58:42,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13288
          },
          {
            "timestamp": "2026-04-25 06:58:42,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13289
          },
          {
            "timestamp": "2026-04-25 06:58:42,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13290
          },
          {
            "timestamp": "2026-04-25 06:58:42,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13291
          },
          {
            "timestamp": "2026-04-25 06:58:42,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13292
          },
          {
            "timestamp": "2026-04-25 06:58:42,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13293
          },
          {
            "timestamp": "2026-04-25 06:58:42,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13294
          },
          {
            "timestamp": "2026-04-25 06:58:42,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13295
          },
          {
            "timestamp": "2026-04-25 06:58:42,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13296
          },
          {
            "timestamp": "2026-04-25 06:58:42,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13297
          },
          {
            "timestamp": "2026-04-25 06:58:42,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13298
          },
          {
            "timestamp": "2026-04-25 06:58:42,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13299
          },
          {
            "timestamp": "2026-04-25 06:58:42,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13300
          },
          {
            "timestamp": "2026-04-25 06:58:42,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13301
          },
          {
            "timestamp": "2026-04-25 06:58:42,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13302
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13303
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13304
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13305
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13306
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13307
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13308
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13309
          },
          {
            "timestamp": "2026-04-25 06:58:42,407",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13310
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "6948",
            "caller": "0x05079038",
            "parentcaller": "0x05078fcf",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13311
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13312
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13313
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13314
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13315
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13316
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13317
          },
          {
            "timestamp": "2026-04-25 06:58:42,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13318
          },
          {
            "timestamp": "2026-04-25 06:58:42,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13319
          },
          {
            "timestamp": "2026-04-25 06:58:42,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13320
          },
          {
            "timestamp": "2026-04-25 06:58:42,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13321
          },
          {
            "timestamp": "2026-04-25 06:58:42,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13322
          },
          {
            "timestamp": "2026-04-25 06:58:42,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13323
          },
          {
            "timestamp": "2026-04-25 06:58:42,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13324
          },
          {
            "timestamp": "2026-04-25 06:58:42,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13325
          },
          {
            "timestamp": "2026-04-25 06:58:42,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13326
          },
          {
            "timestamp": "2026-04-25 06:58:42,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13327
          },
          {
            "timestamp": "2026-04-25 06:58:42,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13328
          },
          {
            "timestamp": "2026-04-25 06:58:42,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13329
          },
          {
            "timestamp": "2026-04-25 06:58:42,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13330
          },
          {
            "timestamp": "2026-04-25 06:58:42,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13331
          },
          {
            "timestamp": "2026-04-25 06:58:42,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13332
          },
          {
            "timestamp": "2026-04-25 06:58:42,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13333
          },
          {
            "timestamp": "2026-04-25 06:58:42,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13334
          },
          {
            "timestamp": "2026-04-25 06:58:42,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13335
          },
          {
            "timestamp": "2026-04-25 06:58:42,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13336
          },
          {
            "timestamp": "2026-04-25 06:58:42,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13337
          },
          {
            "timestamp": "2026-04-25 06:58:42,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13338
          },
          {
            "timestamp": "2026-04-25 06:58:42,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13339
          },
          {
            "timestamp": "2026-04-25 06:58:42,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13340
          },
          {
            "timestamp": "2026-04-25 06:58:42,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13341
          },
          {
            "timestamp": "2026-04-25 06:58:42,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13342
          },
          {
            "timestamp": "2026-04-25 06:58:42,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13343
          },
          {
            "timestamp": "2026-04-25 06:58:42,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13344
          },
          {
            "timestamp": "2026-04-25 06:58:42,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13345
          },
          {
            "timestamp": "2026-04-25 06:58:42,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13346
          },
          {
            "timestamp": "2026-04-25 06:58:42,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13347
          },
          {
            "timestamp": "2026-04-25 06:58:42,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13348
          },
          {
            "timestamp": "2026-04-25 06:58:42,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13349
          },
          {
            "timestamp": "2026-04-25 06:58:42,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13350
          },
          {
            "timestamp": "2026-04-25 06:58:42,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13351
          },
          {
            "timestamp": "2026-04-25 06:58:42,922",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13352
          },
          {
            "timestamp": "2026-04-25 06:58:42,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13353
          },
          {
            "timestamp": "2026-04-25 06:58:42,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13354
          },
          {
            "timestamp": "2026-04-25 06:58:42,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13355
          },
          {
            "timestamp": "2026-04-25 06:58:42,922",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13356
          },
          {
            "timestamp": "2026-04-25 06:58:42,922",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13357
          },
          {
            "timestamp": "2026-04-25 06:58:42,985",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13358
          },
          {
            "timestamp": "2026-04-25 06:58:42,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13359
          },
          {
            "timestamp": "2026-04-25 06:58:42,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13360
          },
          {
            "timestamp": "2026-04-25 06:58:42,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13361
          },
          {
            "timestamp": "2026-04-25 06:58:42,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13362
          },
          {
            "timestamp": "2026-04-25 06:58:43,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13363
          },
          {
            "timestamp": "2026-04-25 06:58:43,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13364
          },
          {
            "timestamp": "2026-04-25 06:58:43,047",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13365
          },
          {
            "timestamp": "2026-04-25 06:58:43,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13366
          },
          {
            "timestamp": "2026-04-25 06:58:43,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13367
          },
          {
            "timestamp": "2026-04-25 06:58:43,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13368
          },
          {
            "timestamp": "2026-04-25 06:58:43,126",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13369
          },
          {
            "timestamp": "2026-04-25 06:58:43,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13370
          },
          {
            "timestamp": "2026-04-25 06:58:43,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13371
          },
          {
            "timestamp": "2026-04-25 06:58:43,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13372
          },
          {
            "timestamp": "2026-04-25 06:58:43,126",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13373
          },
          {
            "timestamp": "2026-04-25 06:58:43,188",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13374
          },
          {
            "timestamp": "2026-04-25 06:58:43,188",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13375
          },
          {
            "timestamp": "2026-04-25 06:58:43,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13376
          },
          {
            "timestamp": "2026-04-25 06:58:43,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13377
          },
          {
            "timestamp": "2026-04-25 06:58:43,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13378
          },
          {
            "timestamp": "2026-04-25 06:58:43,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13379
          },
          {
            "timestamp": "2026-04-25 06:58:43,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13380
          },
          {
            "timestamp": "2026-04-25 06:58:43,251",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13381
          },
          {
            "timestamp": "2026-04-25 06:58:43,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13382
          },
          {
            "timestamp": "2026-04-25 06:58:43,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13383
          },
          {
            "timestamp": "2026-04-25 06:58:43,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13384
          },
          {
            "timestamp": "2026-04-25 06:58:43,313",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13385
          },
          {
            "timestamp": "2026-04-25 06:58:43,313",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13386
          },
          {
            "timestamp": "2026-04-25 06:58:43,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13387
          },
          {
            "timestamp": "2026-04-25 06:58:43,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13388
          },
          {
            "timestamp": "2026-04-25 06:58:43,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13389
          },
          {
            "timestamp": "2026-04-25 06:58:43,376",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13390
          },
          {
            "timestamp": "2026-04-25 06:58:43,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13391
          },
          {
            "timestamp": "2026-04-25 06:58:43,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13392
          },
          {
            "timestamp": "2026-04-25 06:58:43,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13393
          },
          {
            "timestamp": "2026-04-25 06:58:43,376",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13394
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13395
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13396
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13397
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "31"
              }
            ],
            "repeated": 0,
            "id": 13398
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13399
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13400
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13401
          },
          {
            "timestamp": "2026-04-25 06:58:43,438",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13402
          },
          {
            "timestamp": "2026-04-25 06:58:43,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13403
          },
          {
            "timestamp": "2026-04-25 06:58:43,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13404
          },
          {
            "timestamp": "2026-04-25 06:58:43,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "3"
              }
            ],
            "repeated": 0,
            "id": 13405
          },
          {
            "timestamp": "2026-04-25 06:58:43,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13406
          },
          {
            "timestamp": "2026-04-25 06:58:43,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13407
          },
          {
            "timestamp": "2026-04-25 06:58:43,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13408
          },
          {
            "timestamp": "2026-04-25 06:58:43,501",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13409
          },
          {
            "timestamp": "2026-04-25 06:58:43,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13410
          },
          {
            "timestamp": "2026-04-25 06:58:43,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13411
          },
          {
            "timestamp": "2026-04-25 06:58:43,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13412
          },
          {
            "timestamp": "2026-04-25 06:58:43,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13413
          },
          {
            "timestamp": "2026-04-25 06:58:43,563",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13414
          },
          {
            "timestamp": "2026-04-25 06:58:43,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13415
          },
          {
            "timestamp": "2026-04-25 06:58:43,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13416
          },
          {
            "timestamp": "2026-04-25 06:58:43,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13417
          },
          {
            "timestamp": "2026-04-25 06:58:43,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13418
          },
          {
            "timestamp": "2026-04-25 06:58:43,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13419
          },
          {
            "timestamp": "2026-04-25 06:58:43,626",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13420
          },
          {
            "timestamp": "2026-04-25 06:58:43,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13421
          },
          {
            "timestamp": "2026-04-25 06:58:43,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13422
          },
          {
            "timestamp": "2026-04-25 06:58:43,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13423
          },
          {
            "timestamp": "2026-04-25 06:58:43,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13424
          },
          {
            "timestamp": "2026-04-25 06:58:43,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13425
          },
          {
            "timestamp": "2026-04-25 06:58:43,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13426
          },
          {
            "timestamp": "2026-04-25 06:58:43,688",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13427
          },
          {
            "timestamp": "2026-04-25 06:58:43,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13428
          },
          {
            "timestamp": "2026-04-25 06:58:43,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13429
          },
          {
            "timestamp": "2026-04-25 06:58:43,688",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13430
          },
          {
            "timestamp": "2026-04-25 06:58:43,766",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13431
          },
          {
            "timestamp": "2026-04-25 06:58:43,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13432
          },
          {
            "timestamp": "2026-04-25 06:58:43,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13433
          },
          {
            "timestamp": "2026-04-25 06:58:43,766",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13434
          },
          {
            "timestamp": "2026-04-25 06:58:43,829",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13435
          },
          {
            "timestamp": "2026-04-25 06:58:43,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13436
          },
          {
            "timestamp": "2026-04-25 06:58:43,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13437
          },
          {
            "timestamp": "2026-04-25 06:58:43,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13438
          },
          {
            "timestamp": "2026-04-25 06:58:43,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13439
          },
          {
            "timestamp": "2026-04-25 06:58:43,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13440
          },
          {
            "timestamp": "2026-04-25 06:58:43,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13441
          },
          {
            "timestamp": "2026-04-25 06:58:43,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13442
          },
          {
            "timestamp": "2026-04-25 06:58:43,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13443
          },
          {
            "timestamp": "2026-04-25 06:58:43,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13444
          },
          {
            "timestamp": "2026-04-25 06:58:43,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13445
          },
          {
            "timestamp": "2026-04-25 06:58:43,954",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13446
          },
          {
            "timestamp": "2026-04-25 06:58:43,954",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13447
          },
          {
            "timestamp": "2026-04-25 06:58:43,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13448
          },
          {
            "timestamp": "2026-04-25 06:58:43,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13449
          },
          {
            "timestamp": "2026-04-25 06:58:43,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13450
          },
          {
            "timestamp": "2026-04-25 06:58:43,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13451
          },
          {
            "timestamp": "2026-04-25 06:58:43,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13452
          },
          {
            "timestamp": "2026-04-25 06:58:44,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13453
          },
          {
            "timestamp": "2026-04-25 06:58:44,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13454
          },
          {
            "timestamp": "2026-04-25 06:58:44,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13455
          },
          {
            "timestamp": "2026-04-25 06:58:44,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13456
          },
          {
            "timestamp": "2026-04-25 06:58:44,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13457
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "6328",
            "caller": "0x050757f9",
            "parentcaller": "0x0507e90c",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13458
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0678b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 13459
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13460
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 13461
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x050757f9",
            "parentcaller": "0x0836e0a3",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13462
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000006e8",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1768"
              }
            ],
            "repeated": 0,
            "id": 13463
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1768"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 13464
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1768"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 13465
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000006e8"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 13466
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1768"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 13467
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 13468
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13469
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13470
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13471
          },
          {
            "timestamp": "2026-04-25 06:58:44,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13472
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1768"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 13473
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000006ac"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xa0u\\x00T\\x19\\x00\\x00h\\x04\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "1128"
              }
            ],
            "repeated": 0,
            "id": 13474
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x0836e7cf",
            "parentcaller": "0x0836e742",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 3,
            "id": 13475
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 13476
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 13477
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 13478
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 13479
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1768"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 13480
          },
          {
            "timestamp": "2026-04-25 06:58:44,063",
            "thread_id": "1128",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1768"
              }
            ],
            "repeated": 0,
            "id": 13481
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13482
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13483
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 11,
            "id": 13484
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "800",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1768"
              }
            ],
            "repeated": 0,
            "id": 13485
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "800",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 13486
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "800",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 13487
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "800",
            "caller": "0x050757f9",
            "parentcaller": "0x0836facc",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13488
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13489
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 13490
          },
          {
            "timestamp": "2026-04-25 06:58:44,094",
            "thread_id": "800",
            "caller": "0x0507593a",
            "parentcaller": "0x05076200",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 10,
            "id": 13491
          },
          {
            "timestamp": "2026-04-25 06:58:44,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13492
          },
          {
            "timestamp": "2026-04-25 06:58:44,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13493
          },
          {
            "timestamp": "2026-04-25 06:58:44,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13494
          },
          {
            "timestamp": "2026-04-25 06:58:44,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13495
          },
          {
            "timestamp": "2026-04-25 06:58:44,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13496
          },
          {
            "timestamp": "2026-04-25 06:58:44,172",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13497
          },
          {
            "timestamp": "2026-04-25 06:58:44,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13498
          },
          {
            "timestamp": "2026-04-25 06:58:44,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13499
          },
          {
            "timestamp": "2026-04-25 06:58:44,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13500
          },
          {
            "timestamp": "2026-04-25 06:58:44,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13501
          },
          {
            "timestamp": "2026-04-25 06:58:44,235",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13502
          },
          {
            "timestamp": "2026-04-25 06:58:44,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13503
          },
          {
            "timestamp": "2026-04-25 06:58:44,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13504
          },
          {
            "timestamp": "2026-04-25 06:58:44,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13505
          },
          {
            "timestamp": "2026-04-25 06:58:44,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13506
          },
          {
            "timestamp": "2026-04-25 06:58:44,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13507
          },
          {
            "timestamp": "2026-04-25 06:58:44,313",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13508
          },
          {
            "timestamp": "2026-04-25 06:58:44,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13509
          },
          {
            "timestamp": "2026-04-25 06:58:44,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13510
          },
          {
            "timestamp": "2026-04-25 06:58:44,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13511
          },
          {
            "timestamp": "2026-04-25 06:58:44,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13512
          },
          {
            "timestamp": "2026-04-25 06:58:44,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13513
          },
          {
            "timestamp": "2026-04-25 06:58:44,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13514
          },
          {
            "timestamp": "2026-04-25 06:58:44,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13515
          },
          {
            "timestamp": "2026-04-25 06:58:44,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13516
          },
          {
            "timestamp": "2026-04-25 06:58:44,391",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13517
          },
          {
            "timestamp": "2026-04-25 06:58:44,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13518
          },
          {
            "timestamp": "2026-04-25 06:58:44,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13519
          },
          {
            "timestamp": "2026-04-25 06:58:44,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 13520
          },
          {
            "timestamp": "2026-04-25 06:58:44,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13521
          },
          {
            "timestamp": "2026-04-25 06:58:44,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13522
          },
          {
            "timestamp": "2026-04-25 06:58:44,469",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13523
          },
          {
            "timestamp": "2026-04-25 06:58:44,469",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13524
          },
          {
            "timestamp": "2026-04-25 06:58:44,501",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13525
          },
          {
            "timestamp": "2026-04-25 06:58:44,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13526
          },
          {
            "timestamp": "2026-04-25 06:58:44,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13527
          },
          {
            "timestamp": "2026-04-25 06:58:44,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13528
          },
          {
            "timestamp": "2026-04-25 06:58:44,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13529
          },
          {
            "timestamp": "2026-04-25 06:58:44,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13530
          },
          {
            "timestamp": "2026-04-25 06:58:44,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13531
          },
          {
            "timestamp": "2026-04-25 06:58:44,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13532
          },
          {
            "timestamp": "2026-04-25 06:58:44,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13533
          },
          {
            "timestamp": "2026-04-25 06:58:44,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13534
          },
          {
            "timestamp": "2026-04-25 06:58:44,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13535
          },
          {
            "timestamp": "2026-04-25 06:58:44,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13536
          },
          {
            "timestamp": "2026-04-25 06:58:44,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13537
          },
          {
            "timestamp": "2026-04-25 06:58:44,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13538
          },
          {
            "timestamp": "2026-04-25 06:58:44,626",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13539
          },
          {
            "timestamp": "2026-04-25 06:58:44,626",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13540
          },
          {
            "timestamp": "2026-04-25 06:58:44,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13541
          },
          {
            "timestamp": "2026-04-25 06:58:44,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13542
          },
          {
            "timestamp": "2026-04-25 06:58:44,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13543
          },
          {
            "timestamp": "2026-04-25 06:58:44,688",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13544
          },
          {
            "timestamp": "2026-04-25 06:58:44,688",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13545
          },
          {
            "timestamp": "2026-04-25 06:58:44,688",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13546
          },
          {
            "timestamp": "2026-04-25 06:58:44,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13547
          },
          {
            "timestamp": "2026-04-25 06:58:44,688",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13548
          },
          {
            "timestamp": "2026-04-25 06:58:44,751",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13549
          },
          {
            "timestamp": "2026-04-25 06:58:44,751",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13550
          },
          {
            "timestamp": "2026-04-25 06:58:44,751",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13551
          },
          {
            "timestamp": "2026-04-25 06:58:44,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13552
          },
          {
            "timestamp": "2026-04-25 06:58:44,751",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13553
          },
          {
            "timestamp": "2026-04-25 06:58:44,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13554
          },
          {
            "timestamp": "2026-04-25 06:58:44,813",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13555
          },
          {
            "timestamp": "2026-04-25 06:58:44,813",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13556
          },
          {
            "timestamp": "2026-04-25 06:58:44,813",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13557
          },
          {
            "timestamp": "2026-04-25 06:58:44,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13558
          },
          {
            "timestamp": "2026-04-25 06:58:44,813",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13559
          },
          {
            "timestamp": "2026-04-25 06:58:44,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13560
          },
          {
            "timestamp": "2026-04-25 06:58:44,876",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13561
          },
          {
            "timestamp": "2026-04-25 06:58:44,876",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13562
          },
          {
            "timestamp": "2026-04-25 06:58:44,876",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13563
          },
          {
            "timestamp": "2026-04-25 06:58:44,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13564
          },
          {
            "timestamp": "2026-04-25 06:58:44,876",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13565
          },
          {
            "timestamp": "2026-04-25 06:58:44,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13566
          },
          {
            "timestamp": "2026-04-25 06:58:44,938",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13567
          },
          {
            "timestamp": "2026-04-25 06:58:44,938",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13568
          },
          {
            "timestamp": "2026-04-25 06:58:44,938",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13569
          },
          {
            "timestamp": "2026-04-25 06:58:44,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13570
          },
          {
            "timestamp": "2026-04-25 06:58:44,938",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13571
          },
          {
            "timestamp": "2026-04-25 06:58:44,985",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13572
          },
          {
            "timestamp": "2026-04-25 06:58:44,985",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13573
          },
          {
            "timestamp": "2026-04-25 06:58:45,001",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13574
          },
          {
            "timestamp": "2026-04-25 06:58:45,001",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13575
          },
          {
            "timestamp": "2026-04-25 06:58:45,001",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13576
          },
          {
            "timestamp": "2026-04-25 06:58:45,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13577
          },
          {
            "timestamp": "2026-04-25 06:58:45,001",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13578
          },
          {
            "timestamp": "2026-04-25 06:58:45,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13579
          },
          {
            "timestamp": "2026-04-25 06:58:45,063",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13580
          },
          {
            "timestamp": "2026-04-25 06:58:45,063",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13581
          },
          {
            "timestamp": "2026-04-25 06:58:45,063",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13582
          },
          {
            "timestamp": "2026-04-25 06:58:45,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13583
          },
          {
            "timestamp": "2026-04-25 06:58:45,063",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13584
          },
          {
            "timestamp": "2026-04-25 06:58:45,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13585
          },
          {
            "timestamp": "2026-04-25 06:58:45,126",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13586
          },
          {
            "timestamp": "2026-04-25 06:58:45,126",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13587
          },
          {
            "timestamp": "2026-04-25 06:58:45,126",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13588
          },
          {
            "timestamp": "2026-04-25 06:58:45,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13589
          },
          {
            "timestamp": "2026-04-25 06:58:45,126",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13590
          },
          {
            "timestamp": "2026-04-25 06:58:45,188",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13591
          },
          {
            "timestamp": "2026-04-25 06:58:45,188",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13592
          },
          {
            "timestamp": "2026-04-25 06:58:45,188",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13593
          },
          {
            "timestamp": "2026-04-25 06:58:45,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13594
          },
          {
            "timestamp": "2026-04-25 06:58:45,188",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13595
          },
          {
            "timestamp": "2026-04-25 06:58:45,251",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13596
          },
          {
            "timestamp": "2026-04-25 06:58:45,251",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13597
          },
          {
            "timestamp": "2026-04-25 06:58:45,251",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13598
          },
          {
            "timestamp": "2026-04-25 06:58:45,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13599
          },
          {
            "timestamp": "2026-04-25 06:58:45,251",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13600
          },
          {
            "timestamp": "2026-04-25 06:58:45,313",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13601
          },
          {
            "timestamp": "2026-04-25 06:58:45,313",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13602
          },
          {
            "timestamp": "2026-04-25 06:58:45,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13603
          },
          {
            "timestamp": "2026-04-25 06:58:45,313",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13604
          },
          {
            "timestamp": "2026-04-25 06:58:45,376",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13605
          },
          {
            "timestamp": "2026-04-25 06:58:45,376",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13606
          },
          {
            "timestamp": "2026-04-25 06:58:45,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13607
          },
          {
            "timestamp": "2026-04-25 06:58:45,376",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13608
          },
          {
            "timestamp": "2026-04-25 06:58:45,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13609
          },
          {
            "timestamp": "2026-04-25 06:58:45,376",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13610
          },
          {
            "timestamp": "2026-04-25 06:58:45,438",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13611
          },
          {
            "timestamp": "2026-04-25 06:58:45,438",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13612
          },
          {
            "timestamp": "2026-04-25 06:58:45,438",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13613
          },
          {
            "timestamp": "2026-04-25 06:58:45,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13614
          },
          {
            "timestamp": "2026-04-25 06:58:45,438",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13615
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 2,
            "id": 13616
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13617
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13618
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13619
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13620
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13621
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13622
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13623
          },
          {
            "timestamp": "2026-04-25 06:58:45,501",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13624
          },
          {
            "timestamp": "2026-04-25 06:58:45,563",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13625
          },
          {
            "timestamp": "2026-04-25 06:58:45,563",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13626
          },
          {
            "timestamp": "2026-04-25 06:58:45,563",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13627
          },
          {
            "timestamp": "2026-04-25 06:58:45,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "GetSystemTimeAsFileTime",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13628
          },
          {
            "timestamp": "2026-04-25 06:58:45,563",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13629
          },
          {
            "timestamp": "2026-04-25 06:58:45,626",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13630
          },
          {
            "timestamp": "2026-04-25 06:58:45,626",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13631
          },
          {
            "timestamp": "2026-04-25 06:58:45,626",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13632
          },
          {
            "timestamp": "2026-04-25 06:58:45,641",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13633
          },
          {
            "timestamp": "2026-04-25 06:58:45,704",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13634
          },
          {
            "timestamp": "2026-04-25 06:58:45,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13635
          },
          {
            "timestamp": "2026-04-25 06:58:45,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13636
          },
          {
            "timestamp": "2026-04-25 06:58:45,766",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13637
          },
          {
            "timestamp": "2026-04-25 06:58:45,766",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13638
          },
          {
            "timestamp": "2026-04-25 06:58:45,766",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13639
          },
          {
            "timestamp": "2026-04-25 06:58:45,829",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13640
          },
          {
            "timestamp": "2026-04-25 06:58:45,829",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13641
          },
          {
            "timestamp": "2026-04-25 06:58:45,829",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13642
          },
          {
            "timestamp": "2026-04-25 06:58:45,891",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13643
          },
          {
            "timestamp": "2026-04-25 06:58:45,891",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13644
          },
          {
            "timestamp": "2026-04-25 06:58:45,891",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13645
          },
          {
            "timestamp": "2026-04-25 06:58:45,954",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13646
          },
          {
            "timestamp": "2026-04-25 06:58:45,954",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13647
          },
          {
            "timestamp": "2026-04-25 06:58:45,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13648
          },
          {
            "timestamp": "2026-04-25 06:58:45,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13649
          },
          {
            "timestamp": "2026-04-25 06:58:46,016",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13650
          },
          {
            "timestamp": "2026-04-25 06:58:46,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13651
          },
          {
            "timestamp": "2026-04-25 06:58:46,016",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13652
          },
          {
            "timestamp": "2026-04-25 06:58:46,079",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13653
          },
          {
            "timestamp": "2026-04-25 06:58:46,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13654
          },
          {
            "timestamp": "2026-04-25 06:58:46,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13655
          },
          {
            "timestamp": "2026-04-25 06:58:46,141",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13656
          },
          {
            "timestamp": "2026-04-25 06:58:46,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13657
          },
          {
            "timestamp": "2026-04-25 06:58:46,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13658
          },
          {
            "timestamp": "2026-04-25 06:58:46,204",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13659
          },
          {
            "timestamp": "2026-04-25 06:58:46,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13660
          },
          {
            "timestamp": "2026-04-25 06:58:46,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13661
          },
          {
            "timestamp": "2026-04-25 06:58:46,266",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13662
          },
          {
            "timestamp": "2026-04-25 06:58:46,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13663
          },
          {
            "timestamp": "2026-04-25 06:58:46,266",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13664
          },
          {
            "timestamp": "2026-04-25 06:58:46,329",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13665
          },
          {
            "timestamp": "2026-04-25 06:58:46,329",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13666
          },
          {
            "timestamp": "2026-04-25 06:58:46,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13667
          },
          {
            "timestamp": "2026-04-25 06:58:46,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13668
          },
          {
            "timestamp": "2026-04-25 06:58:46,391",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13669
          },
          {
            "timestamp": "2026-04-25 06:58:46,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13670
          },
          {
            "timestamp": "2026-04-25 06:58:46,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13671
          },
          {
            "timestamp": "2026-04-25 06:58:46,454",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13672
          },
          {
            "timestamp": "2026-04-25 06:58:46,454",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13673
          },
          {
            "timestamp": "2026-04-25 06:58:46,454",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 13674
          },
          {
            "timestamp": "2026-04-25 06:58:46,454",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13675
          },
          {
            "timestamp": "2026-04-25 06:58:46,516",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13676
          },
          {
            "timestamp": "2026-04-25 06:58:46,516",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13677
          },
          {
            "timestamp": "2026-04-25 06:58:46,532",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13678
          },
          {
            "timestamp": "2026-04-25 06:58:46,532",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13679
          },
          {
            "timestamp": "2026-04-25 06:58:46,579",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13680
          },
          {
            "timestamp": "2026-04-25 06:58:46,579",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13681
          },
          {
            "timestamp": "2026-04-25 06:58:46,579",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13682
          },
          {
            "timestamp": "2026-04-25 06:58:46,579",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13683
          },
          {
            "timestamp": "2026-04-25 06:58:46,641",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13684
          },
          {
            "timestamp": "2026-04-25 06:58:46,641",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13685
          },
          {
            "timestamp": "2026-04-25 06:58:46,641",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13686
          },
          {
            "timestamp": "2026-04-25 06:58:46,704",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13687
          },
          {
            "timestamp": "2026-04-25 06:58:46,704",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13688
          },
          {
            "timestamp": "2026-04-25 06:58:46,704",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13689
          },
          {
            "timestamp": "2026-04-25 06:58:46,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13690
          },
          {
            "timestamp": "2026-04-25 06:58:46,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13691
          },
          {
            "timestamp": "2026-04-25 06:58:46,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13692
          },
          {
            "timestamp": "2026-04-25 06:58:46,844",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13693
          },
          {
            "timestamp": "2026-04-25 06:58:46,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13694
          },
          {
            "timestamp": "2026-04-25 06:58:46,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13695
          },
          {
            "timestamp": "2026-04-25 06:58:46,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13696
          },
          {
            "timestamp": "2026-04-25 06:58:46,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13697
          },
          {
            "timestamp": "2026-04-25 06:58:46,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13698
          },
          {
            "timestamp": "2026-04-25 06:58:46,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13699
          },
          {
            "timestamp": "2026-04-25 06:58:46,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13700
          },
          {
            "timestamp": "2026-04-25 06:58:46,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13701
          },
          {
            "timestamp": "2026-04-25 06:58:47,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13702
          },
          {
            "timestamp": "2026-04-25 06:58:47,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13703
          },
          {
            "timestamp": "2026-04-25 06:58:47,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13704
          },
          {
            "timestamp": "2026-04-25 06:58:47,047",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13705
          },
          {
            "timestamp": "2026-04-25 06:58:47,047",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13706
          },
          {
            "timestamp": "2026-04-25 06:58:47,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13707
          },
          {
            "timestamp": "2026-04-25 06:58:47,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13708
          },
          {
            "timestamp": "2026-04-25 06:58:47,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13709
          },
          {
            "timestamp": "2026-04-25 06:58:47,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13710
          },
          {
            "timestamp": "2026-04-25 06:58:47,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13711
          },
          {
            "timestamp": "2026-04-25 06:58:47,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13712
          },
          {
            "timestamp": "2026-04-25 06:58:47,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13713
          },
          {
            "timestamp": "2026-04-25 06:58:47,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13714
          },
          {
            "timestamp": "2026-04-25 06:58:47,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13715
          },
          {
            "timestamp": "2026-04-25 06:58:47,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13716
          },
          {
            "timestamp": "2026-04-25 06:58:47,282",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13717
          },
          {
            "timestamp": "2026-04-25 06:58:47,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13718
          },
          {
            "timestamp": "2026-04-25 06:58:47,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13719
          },
          {
            "timestamp": "2026-04-25 06:58:47,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13720
          },
          {
            "timestamp": "2026-04-25 06:58:47,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13721
          },
          {
            "timestamp": "2026-04-25 06:58:47,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13722
          },
          {
            "timestamp": "2026-04-25 06:58:47,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13723
          },
          {
            "timestamp": "2026-04-25 06:58:47,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13724
          },
          {
            "timestamp": "2026-04-25 06:58:47,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13725
          },
          {
            "timestamp": "2026-04-25 06:58:47,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "47"
              }
            ],
            "repeated": 0,
            "id": 13726
          },
          {
            "timestamp": "2026-04-25 06:58:47,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13727
          },
          {
            "timestamp": "2026-04-25 06:58:47,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13728
          },
          {
            "timestamp": "2026-04-25 06:58:47,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13729
          },
          {
            "timestamp": "2026-04-25 06:58:47,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13730
          },
          {
            "timestamp": "2026-04-25 06:58:47,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13731
          },
          {
            "timestamp": "2026-04-25 06:58:47,563",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13732
          },
          {
            "timestamp": "2026-04-25 06:58:47,563",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13733
          },
          {
            "timestamp": "2026-04-25 06:58:47,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13734
          },
          {
            "timestamp": "2026-04-25 06:58:47,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13735
          },
          {
            "timestamp": "2026-04-25 06:58:47,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13736
          },
          {
            "timestamp": "2026-04-25 06:58:47,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13737
          },
          {
            "timestamp": "2026-04-25 06:58:47,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13738
          },
          {
            "timestamp": "2026-04-25 06:58:47,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13739
          },
          {
            "timestamp": "2026-04-25 06:58:47,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13740
          },
          {
            "timestamp": "2026-04-25 06:58:47,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13741
          },
          {
            "timestamp": "2026-04-25 06:58:47,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13742
          },
          {
            "timestamp": "2026-04-25 06:58:47,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13743
          },
          {
            "timestamp": "2026-04-25 06:58:47,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13744
          },
          {
            "timestamp": "2026-04-25 06:58:47,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13745
          },
          {
            "timestamp": "2026-04-25 06:58:47,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13746
          },
          {
            "timestamp": "2026-04-25 06:58:47,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13747
          },
          {
            "timestamp": "2026-04-25 06:58:47,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13748
          },
          {
            "timestamp": "2026-04-25 06:58:47,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13749
          },
          {
            "timestamp": "2026-04-25 06:58:47,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13750
          },
          {
            "timestamp": "2026-04-25 06:58:47,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13751
          },
          {
            "timestamp": "2026-04-25 06:58:47,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13752
          },
          {
            "timestamp": "2026-04-25 06:58:47,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13753
          },
          {
            "timestamp": "2026-04-25 06:58:47,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13754
          },
          {
            "timestamp": "2026-04-25 06:58:47,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13755
          },
          {
            "timestamp": "2026-04-25 06:58:48,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13756
          },
          {
            "timestamp": "2026-04-25 06:58:48,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13757
          },
          {
            "timestamp": "2026-04-25 06:58:48,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13758
          },
          {
            "timestamp": "2026-04-25 06:58:48,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13759
          },
          {
            "timestamp": "2026-04-25 06:58:48,079",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13760
          },
          {
            "timestamp": "2026-04-25 06:58:48,079",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13761
          },
          {
            "timestamp": "2026-04-25 06:58:48,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13762
          },
          {
            "timestamp": "2026-04-25 06:58:48,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13763
          },
          {
            "timestamp": "2026-04-25 06:58:48,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13764
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x067ab000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 13765
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13766
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13767
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 13768
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x0000069c",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1692"
              }
            ],
            "repeated": 0,
            "id": 13769
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1692"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 13770
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1692"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 13771
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 13772
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13773
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13774
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000069c"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 13775
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1692"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 13776
          },
          {
            "timestamp": "2026-04-25 06:58:48,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13777
          },
          {
            "timestamp": "2026-04-25 06:58:48,126",
            "thread_id": "800",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1692"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 13778
          },
          {
            "timestamp": "2026-04-25 06:58:48,141",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 13779
          },
          {
            "timestamp": "2026-04-25 06:58:48,141",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 13780
          },
          {
            "timestamp": "2026-04-25 06:58:48,141",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 13781
          },
          {
            "timestamp": "2026-04-25 06:58:48,141",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13782
          },
          {
            "timestamp": "2026-04-25 06:58:48,141",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 13783
          },
          {
            "timestamp": "2026-04-25 06:58:48,141",
            "thread_id": "800",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1692"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 13784
          },
          {
            "timestamp": "2026-04-25 06:58:48,141",
            "thread_id": "800",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1692"
              }
            ],
            "repeated": 0,
            "id": 13785
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13786
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13787
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13788
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "800",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1692"
              }
            ],
            "repeated": 0,
            "id": 13789
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "800",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 13790
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "800",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 13791
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 13792
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 13793
          },
          {
            "timestamp": "2026-04-25 06:58:48,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13794
          },
          {
            "timestamp": "2026-04-25 06:58:48,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13795
          },
          {
            "timestamp": "2026-04-25 06:58:48,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13796
          },
          {
            "timestamp": "2026-04-25 06:58:48,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13797
          },
          {
            "timestamp": "2026-04-25 06:58:48,282",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13798
          },
          {
            "timestamp": "2026-04-25 06:58:48,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13799
          },
          {
            "timestamp": "2026-04-25 06:58:48,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13800
          },
          {
            "timestamp": "2026-04-25 06:58:48,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13801
          },
          {
            "timestamp": "2026-04-25 06:58:48,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13802
          },
          {
            "timestamp": "2026-04-25 06:58:48,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13803
          },
          {
            "timestamp": "2026-04-25 06:58:48,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13804
          },
          {
            "timestamp": "2026-04-25 06:58:48,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13805
          },
          {
            "timestamp": "2026-04-25 06:58:48,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13806
          },
          {
            "timestamp": "2026-04-25 06:58:48,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13807
          },
          {
            "timestamp": "2026-04-25 06:58:48,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13808
          },
          {
            "timestamp": "2026-04-25 06:58:48,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13809
          },
          {
            "timestamp": "2026-04-25 06:58:48,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13810
          },
          {
            "timestamp": "2026-04-25 06:58:48,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13811
          },
          {
            "timestamp": "2026-04-25 06:58:48,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13812
          },
          {
            "timestamp": "2026-04-25 06:58:48,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13813
          },
          {
            "timestamp": "2026-04-25 06:58:48,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13814
          },
          {
            "timestamp": "2026-04-25 06:58:48,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13815
          },
          {
            "timestamp": "2026-04-25 06:58:48,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13816
          },
          {
            "timestamp": "2026-04-25 06:58:48,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13817
          },
          {
            "timestamp": "2026-04-25 06:58:48,594",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13818
          },
          {
            "timestamp": "2026-04-25 06:58:48,594",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13819
          },
          {
            "timestamp": "2026-04-25 06:58:48,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13820
          },
          {
            "timestamp": "2026-04-25 06:58:48,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13821
          },
          {
            "timestamp": "2026-04-25 06:58:48,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13822
          },
          {
            "timestamp": "2026-04-25 06:58:48,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13823
          },
          {
            "timestamp": "2026-04-25 06:58:48,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13824
          },
          {
            "timestamp": "2026-04-25 06:58:48,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13825
          },
          {
            "timestamp": "2026-04-25 06:58:48,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13826
          },
          {
            "timestamp": "2026-04-25 06:58:48,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13827
          },
          {
            "timestamp": "2026-04-25 06:58:48,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13828
          },
          {
            "timestamp": "2026-04-25 06:58:48,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13829
          },
          {
            "timestamp": "2026-04-25 06:58:48,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13830
          },
          {
            "timestamp": "2026-04-25 06:58:48,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13831
          },
          {
            "timestamp": "2026-04-25 06:58:48,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13832
          },
          {
            "timestamp": "2026-04-25 06:58:48,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13833
          },
          {
            "timestamp": "2026-04-25 06:58:48,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13834
          },
          {
            "timestamp": "2026-04-25 06:58:48,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13835
          },
          {
            "timestamp": "2026-04-25 06:58:48,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13836
          },
          {
            "timestamp": "2026-04-25 06:58:48,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13837
          },
          {
            "timestamp": "2026-04-25 06:58:48,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13838
          },
          {
            "timestamp": "2026-04-25 06:58:49,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13839
          },
          {
            "timestamp": "2026-04-25 06:58:49,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13840
          },
          {
            "timestamp": "2026-04-25 06:58:49,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13841
          },
          {
            "timestamp": "2026-04-25 06:58:49,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13842
          },
          {
            "timestamp": "2026-04-25 06:58:49,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13843
          },
          {
            "timestamp": "2026-04-25 06:58:49,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13844
          },
          {
            "timestamp": "2026-04-25 06:58:49,110",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13845
          },
          {
            "timestamp": "2026-04-25 06:58:49,110",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13846
          },
          {
            "timestamp": "2026-04-25 06:58:49,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13847
          },
          {
            "timestamp": "2026-04-25 06:58:49,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13848
          },
          {
            "timestamp": "2026-04-25 06:58:49,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13849
          },
          {
            "timestamp": "2026-04-25 06:58:49,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13850
          },
          {
            "timestamp": "2026-04-25 06:58:49,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13851
          },
          {
            "timestamp": "2026-04-25 06:58:49,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13852
          },
          {
            "timestamp": "2026-04-25 06:58:49,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13853
          },
          {
            "timestamp": "2026-04-25 06:58:49,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13854
          },
          {
            "timestamp": "2026-04-25 06:58:49,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13855
          },
          {
            "timestamp": "2026-04-25 06:58:49,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13856
          },
          {
            "timestamp": "2026-04-25 06:58:49,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13857
          },
          {
            "timestamp": "2026-04-25 06:58:49,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13858
          },
          {
            "timestamp": "2026-04-25 06:58:49,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13859
          },
          {
            "timestamp": "2026-04-25 06:58:49,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13860
          },
          {
            "timestamp": "2026-04-25 06:58:49,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13861
          },
          {
            "timestamp": "2026-04-25 06:58:49,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13862
          },
          {
            "timestamp": "2026-04-25 06:58:49,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13863
          },
          {
            "timestamp": "2026-04-25 06:58:49,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13864
          },
          {
            "timestamp": "2026-04-25 06:58:49,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13865
          },
          {
            "timestamp": "2026-04-25 06:58:49,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13866
          },
          {
            "timestamp": "2026-04-25 06:58:49,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13867
          },
          {
            "timestamp": "2026-04-25 06:58:49,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13868
          },
          {
            "timestamp": "2026-04-25 06:58:49,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13869
          },
          {
            "timestamp": "2026-04-25 06:58:49,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13870
          },
          {
            "timestamp": "2026-04-25 06:58:49,626",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13871
          },
          {
            "timestamp": "2026-04-25 06:58:49,626",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13872
          },
          {
            "timestamp": "2026-04-25 06:58:49,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13873
          },
          {
            "timestamp": "2026-04-25 06:58:49,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13874
          },
          {
            "timestamp": "2026-04-25 06:58:49,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13875
          },
          {
            "timestamp": "2026-04-25 06:58:49,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13876
          },
          {
            "timestamp": "2026-04-25 06:58:49,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13877
          },
          {
            "timestamp": "2026-04-25 06:58:49,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13878
          },
          {
            "timestamp": "2026-04-25 06:58:49,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13879
          },
          {
            "timestamp": "2026-04-25 06:58:49,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13880
          },
          {
            "timestamp": "2026-04-25 06:58:49,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13881
          },
          {
            "timestamp": "2026-04-25 06:58:49,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13882
          },
          {
            "timestamp": "2026-04-25 06:58:49,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13883
          },
          {
            "timestamp": "2026-04-25 06:58:49,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13884
          },
          {
            "timestamp": "2026-04-25 06:58:49,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13885
          },
          {
            "timestamp": "2026-04-25 06:58:49,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13886
          },
          {
            "timestamp": "2026-04-25 06:58:49,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13887
          },
          {
            "timestamp": "2026-04-25 06:58:49,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13888
          },
          {
            "timestamp": "2026-04-25 06:58:49,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13889
          },
          {
            "timestamp": "2026-04-25 06:58:49,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13890
          },
          {
            "timestamp": "2026-04-25 06:58:49,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13891
          },
          {
            "timestamp": "2026-04-25 06:58:50,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13892
          },
          {
            "timestamp": "2026-04-25 06:58:50,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13893
          },
          {
            "timestamp": "2026-04-25 06:58:50,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13894
          },
          {
            "timestamp": "2026-04-25 06:58:50,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13895
          },
          {
            "timestamp": "2026-04-25 06:58:50,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13896
          },
          {
            "timestamp": "2026-04-25 06:58:50,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13897
          },
          {
            "timestamp": "2026-04-25 06:58:50,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13898
          },
          {
            "timestamp": "2026-04-25 06:58:50,141",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13899
          },
          {
            "timestamp": "2026-04-25 06:58:50,141",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13900
          },
          {
            "timestamp": "2026-04-25 06:58:50,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13901
          },
          {
            "timestamp": "2026-04-25 06:58:50,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13902
          },
          {
            "timestamp": "2026-04-25 06:58:50,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13903
          },
          {
            "timestamp": "2026-04-25 06:58:50,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13904
          },
          {
            "timestamp": "2026-04-25 06:58:50,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13905
          },
          {
            "timestamp": "2026-04-25 06:58:50,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13906
          },
          {
            "timestamp": "2026-04-25 06:58:50,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13907
          },
          {
            "timestamp": "2026-04-25 06:58:50,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13908
          },
          {
            "timestamp": "2026-04-25 06:58:50,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13909
          },
          {
            "timestamp": "2026-04-25 06:58:50,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13910
          },
          {
            "timestamp": "2026-04-25 06:58:50,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13911
          },
          {
            "timestamp": "2026-04-25 06:58:50,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13912
          },
          {
            "timestamp": "2026-04-25 06:58:50,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13913
          },
          {
            "timestamp": "2026-04-25 06:58:50,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13914
          },
          {
            "timestamp": "2026-04-25 06:58:50,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13915
          },
          {
            "timestamp": "2026-04-25 06:58:50,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13916
          },
          {
            "timestamp": "2026-04-25 06:58:50,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13917
          },
          {
            "timestamp": "2026-04-25 06:58:50,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13918
          },
          {
            "timestamp": "2026-04-25 06:58:50,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13919
          },
          {
            "timestamp": "2026-04-25 06:58:50,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13920
          },
          {
            "timestamp": "2026-04-25 06:58:50,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13921
          },
          {
            "timestamp": "2026-04-25 06:58:50,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13922
          },
          {
            "timestamp": "2026-04-25 06:58:50,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13923
          },
          {
            "timestamp": "2026-04-25 06:58:50,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13924
          },
          {
            "timestamp": "2026-04-25 06:58:50,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13925
          },
          {
            "timestamp": "2026-04-25 06:58:50,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13926
          },
          {
            "timestamp": "2026-04-25 06:58:50,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13927
          },
          {
            "timestamp": "2026-04-25 06:58:50,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13928
          },
          {
            "timestamp": "2026-04-25 06:58:50,657",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13929
          },
          {
            "timestamp": "2026-04-25 06:58:50,657",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13930
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "2784",
            "caller": "0x77eab5a6",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "2784"
              }
            ],
            "repeated": 0,
            "id": 13931
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "2784",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 13932
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "2784",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006b8"
              }
            ],
            "repeated": 0,
            "id": 13933
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "2784",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006b4"
              }
            ],
            "repeated": 0,
            "id": 13934
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "2784",
            "caller": "0x77eab5c9",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 13935
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "4596",
            "caller": "0x77eab5a6",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "4596"
              }
            ],
            "repeated": 0,
            "id": 13936
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "4596",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 0,
            "id": 13937
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "4596",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000608"
              }
            ],
            "repeated": 0,
            "id": 13938
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "4596",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005f4"
              }
            ],
            "repeated": 0,
            "id": 13939
          },
          {
            "timestamp": "2026-04-25 06:58:50,704",
            "thread_id": "4596",
            "caller": "0x77eab5c9",
            "parentcaller": "0x77e760fc",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 13940
          },
          {
            "timestamp": "2026-04-25 06:58:50,719",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13941
          },
          {
            "timestamp": "2026-04-25 06:58:50,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13942
          },
          {
            "timestamp": "2026-04-25 06:58:50,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13943
          },
          {
            "timestamp": "2026-04-25 06:58:50,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13944
          },
          {
            "timestamp": "2026-04-25 06:58:50,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13945
          },
          {
            "timestamp": "2026-04-25 06:58:50,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13946
          },
          {
            "timestamp": "2026-04-25 06:58:50,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13947
          },
          {
            "timestamp": "2026-04-25 06:58:50,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13948
          },
          {
            "timestamp": "2026-04-25 06:58:50,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13949
          },
          {
            "timestamp": "2026-04-25 06:58:50,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 13950
          },
          {
            "timestamp": "2026-04-25 06:58:50,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13951
          },
          {
            "timestamp": "2026-04-25 06:58:50,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13952
          },
          {
            "timestamp": "2026-04-25 06:58:50,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13953
          },
          {
            "timestamp": "2026-04-25 06:58:50,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13954
          },
          {
            "timestamp": "2026-04-25 06:58:50,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13955
          },
          {
            "timestamp": "2026-04-25 06:58:51,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13956
          },
          {
            "timestamp": "2026-04-25 06:58:51,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13957
          },
          {
            "timestamp": "2026-04-25 06:58:51,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13958
          },
          {
            "timestamp": "2026-04-25 06:58:51,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13959
          },
          {
            "timestamp": "2026-04-25 06:58:51,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13960
          },
          {
            "timestamp": "2026-04-25 06:58:51,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13961
          },
          {
            "timestamp": "2026-04-25 06:58:51,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13962
          },
          {
            "timestamp": "2026-04-25 06:58:51,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13963
          },
          {
            "timestamp": "2026-04-25 06:58:51,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13964
          },
          {
            "timestamp": "2026-04-25 06:58:51,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13965
          },
          {
            "timestamp": "2026-04-25 06:58:51,172",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13966
          },
          {
            "timestamp": "2026-04-25 06:58:51,172",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 13967
          },
          {
            "timestamp": "2026-04-25 06:58:51,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13968
          },
          {
            "timestamp": "2026-04-25 06:58:51,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13969
          },
          {
            "timestamp": "2026-04-25 06:58:51,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13970
          },
          {
            "timestamp": "2026-04-25 06:58:51,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13971
          },
          {
            "timestamp": "2026-04-25 06:58:51,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13972
          },
          {
            "timestamp": "2026-04-25 06:58:51,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13973
          },
          {
            "timestamp": "2026-04-25 06:58:51,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13974
          },
          {
            "timestamp": "2026-04-25 06:58:51,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13975
          },
          {
            "timestamp": "2026-04-25 06:58:51,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13976
          },
          {
            "timestamp": "2026-04-25 06:58:51,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13977
          },
          {
            "timestamp": "2026-04-25 06:58:51,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13978
          },
          {
            "timestamp": "2026-04-25 06:58:51,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13979
          },
          {
            "timestamp": "2026-04-25 06:58:51,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13980
          },
          {
            "timestamp": "2026-04-25 06:58:51,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13981
          },
          {
            "timestamp": "2026-04-25 06:58:51,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13982
          },
          {
            "timestamp": "2026-04-25 06:58:51,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13983
          },
          {
            "timestamp": "2026-04-25 06:58:51,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13984
          },
          {
            "timestamp": "2026-04-25 06:58:51,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13985
          },
          {
            "timestamp": "2026-04-25 06:58:51,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13986
          },
          {
            "timestamp": "2026-04-25 06:58:51,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13987
          },
          {
            "timestamp": "2026-04-25 06:58:51,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13988
          },
          {
            "timestamp": "2026-04-25 06:58:51,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13989
          },
          {
            "timestamp": "2026-04-25 06:58:51,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13990
          },
          {
            "timestamp": "2026-04-25 06:58:51,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 13991
          },
          {
            "timestamp": "2026-04-25 06:58:51,594",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13992
          },
          {
            "timestamp": "2026-04-25 06:58:51,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13993
          },
          {
            "timestamp": "2026-04-25 06:58:51,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13994
          },
          {
            "timestamp": "2026-04-25 06:58:51,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 13995
          },
          {
            "timestamp": "2026-04-25 06:58:51,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13996
          },
          {
            "timestamp": "2026-04-25 06:58:51,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 13997
          },
          {
            "timestamp": "2026-04-25 06:58:51,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 13998
          },
          {
            "timestamp": "2026-04-25 06:58:51,688",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 13999
          },
          {
            "timestamp": "2026-04-25 06:58:51,688",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14000
          },
          {
            "timestamp": "2026-04-25 06:58:51,719",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14001
          },
          {
            "timestamp": "2026-04-25 06:58:51,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14002
          },
          {
            "timestamp": "2026-04-25 06:58:51,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14003
          },
          {
            "timestamp": "2026-04-25 06:58:51,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14004
          },
          {
            "timestamp": "2026-04-25 06:58:51,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14005
          },
          {
            "timestamp": "2026-04-25 06:58:51,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14006
          },
          {
            "timestamp": "2026-04-25 06:58:51,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14007
          },
          {
            "timestamp": "2026-04-25 06:58:51,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14008
          },
          {
            "timestamp": "2026-04-25 06:58:51,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14009
          },
          {
            "timestamp": "2026-04-25 06:58:51,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14010
          },
          {
            "timestamp": "2026-04-25 06:58:51,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14011
          },
          {
            "timestamp": "2026-04-25 06:58:51,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14012
          },
          {
            "timestamp": "2026-04-25 06:58:51,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14013
          },
          {
            "timestamp": "2026-04-25 06:58:51,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14014
          },
          {
            "timestamp": "2026-04-25 06:58:51,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14015
          },
          {
            "timestamp": "2026-04-25 06:58:51,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14016
          },
          {
            "timestamp": "2026-04-25 06:58:52,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14017
          },
          {
            "timestamp": "2026-04-25 06:58:52,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14018
          },
          {
            "timestamp": "2026-04-25 06:58:52,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14019
          },
          {
            "timestamp": "2026-04-25 06:58:52,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14020
          },
          {
            "timestamp": "2026-04-25 06:58:52,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14021
          },
          {
            "timestamp": "2026-04-25 06:58:52,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14022
          },
          {
            "timestamp": "2026-04-25 06:58:52,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14023
          },
          {
            "timestamp": "2026-04-25 06:58:52,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14024
          },
          {
            "timestamp": "2026-04-25 06:58:52,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14025
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x067cb000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 14026
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14027
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14028
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000006a0",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1696"
              }
            ],
            "repeated": 0,
            "id": 14029
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1696"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 14030
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1696"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 14031
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000006a0"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 14032
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1696"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 14033
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 14034
          },
          {
            "timestamp": "2026-04-25 06:58:52,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14035
          },
          {
            "timestamp": "2026-04-25 06:58:52,188",
            "thread_id": "800",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1696"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14036
          },
          {
            "timestamp": "2026-04-25 06:58:52,188",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 14037
          },
          {
            "timestamp": "2026-04-25 06:58:52,188",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 14038
          },
          {
            "timestamp": "2026-04-25 06:58:52,188",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14039
          },
          {
            "timestamp": "2026-04-25 06:58:52,188",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14040
          },
          {
            "timestamp": "2026-04-25 06:58:52,188",
            "thread_id": "800",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1696"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 14041
          },
          {
            "timestamp": "2026-04-25 06:58:52,188",
            "thread_id": "800",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1696"
              }
            ],
            "repeated": 0,
            "id": 14042
          },
          {
            "timestamp": "2026-04-25 06:58:52,204",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14043
          },
          {
            "timestamp": "2026-04-25 06:58:52,204",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14044
          },
          {
            "timestamp": "2026-04-25 06:58:52,204",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14045
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "800",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1696"
              }
            ],
            "repeated": 0,
            "id": 14046
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "800",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 14047
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "800",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 14048
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 14049
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14050
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x7378545c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14051
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14052
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "800",
            "caller": "0x0836fbc7",
            "parentcaller": "0x0836e8b1",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14053
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "1416",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 14054
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14055
          },
          {
            "timestamp": "2026-04-25 06:58:52,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14056
          },
          {
            "timestamp": "2026-04-25 06:58:52,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14057
          },
          {
            "timestamp": "2026-04-25 06:58:52,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14058
          },
          {
            "timestamp": "2026-04-25 06:58:52,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14059
          },
          {
            "timestamp": "2026-04-25 06:58:52,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14060
          },
          {
            "timestamp": "2026-04-25 06:58:52,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14061
          },
          {
            "timestamp": "2026-04-25 06:58:52,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14062
          },
          {
            "timestamp": "2026-04-25 06:58:52,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14063
          },
          {
            "timestamp": "2026-04-25 06:58:52,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14064
          },
          {
            "timestamp": "2026-04-25 06:58:52,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14065
          },
          {
            "timestamp": "2026-04-25 06:58:52,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14066
          },
          {
            "timestamp": "2026-04-25 06:58:52,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14067
          },
          {
            "timestamp": "2026-04-25 06:58:52,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14068
          },
          {
            "timestamp": "2026-04-25 06:58:52,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14069
          },
          {
            "timestamp": "2026-04-25 06:58:52,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14070
          },
          {
            "timestamp": "2026-04-25 06:58:52,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14071
          },
          {
            "timestamp": "2026-04-25 06:58:52,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14072
          },
          {
            "timestamp": "2026-04-25 06:58:52,594",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14073
          },
          {
            "timestamp": "2026-04-25 06:58:52,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14074
          },
          {
            "timestamp": "2026-04-25 06:58:52,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14075
          },
          {
            "timestamp": "2026-04-25 06:58:52,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14076
          },
          {
            "timestamp": "2026-04-25 06:58:52,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14077
          },
          {
            "timestamp": "2026-04-25 06:58:52,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14078
          },
          {
            "timestamp": "2026-04-25 06:58:52,719",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14079
          },
          {
            "timestamp": "2026-04-25 06:58:52,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14080
          },
          {
            "timestamp": "2026-04-25 06:58:52,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14081
          },
          {
            "timestamp": "2026-04-25 06:58:52,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14082
          },
          {
            "timestamp": "2026-04-25 06:58:52,719",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14083
          },
          {
            "timestamp": "2026-04-25 06:58:52,719",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14084
          },
          {
            "timestamp": "2026-04-25 06:58:52,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14085
          },
          {
            "timestamp": "2026-04-25 06:58:52,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14086
          },
          {
            "timestamp": "2026-04-25 06:58:52,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14087
          },
          {
            "timestamp": "2026-04-25 06:58:52,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14088
          },
          {
            "timestamp": "2026-04-25 06:58:52,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14089
          },
          {
            "timestamp": "2026-04-25 06:58:52,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14090
          },
          {
            "timestamp": "2026-04-25 06:58:52,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14091
          },
          {
            "timestamp": "2026-04-25 06:58:52,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14092
          },
          {
            "timestamp": "2026-04-25 06:58:52,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14093
          },
          {
            "timestamp": "2026-04-25 06:58:52,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14094
          },
          {
            "timestamp": "2026-04-25 06:58:52,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14095
          },
          {
            "timestamp": "2026-04-25 06:58:52,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14096
          },
          {
            "timestamp": "2026-04-25 06:58:52,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14097
          },
          {
            "timestamp": "2026-04-25 06:58:53,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14098
          },
          {
            "timestamp": "2026-04-25 06:58:53,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14099
          },
          {
            "timestamp": "2026-04-25 06:58:53,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14100
          },
          {
            "timestamp": "2026-04-25 06:58:53,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14101
          },
          {
            "timestamp": "2026-04-25 06:58:53,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14102
          },
          {
            "timestamp": "2026-04-25 06:58:53,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14103
          },
          {
            "timestamp": "2026-04-25 06:58:53,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14104
          },
          {
            "timestamp": "2026-04-25 06:58:53,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14105
          },
          {
            "timestamp": "2026-04-25 06:58:53,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14106
          },
          {
            "timestamp": "2026-04-25 06:58:53,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14107
          },
          {
            "timestamp": "2026-04-25 06:58:53,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14108
          },
          {
            "timestamp": "2026-04-25 06:58:53,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14109
          },
          {
            "timestamp": "2026-04-25 06:58:53,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14110
          },
          {
            "timestamp": "2026-04-25 06:58:53,235",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14111
          },
          {
            "timestamp": "2026-04-25 06:58:53,235",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14112
          },
          {
            "timestamp": "2026-04-25 06:58:53,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14113
          },
          {
            "timestamp": "2026-04-25 06:58:53,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14114
          },
          {
            "timestamp": "2026-04-25 06:58:53,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14115
          },
          {
            "timestamp": "2026-04-25 06:58:53,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14116
          },
          {
            "timestamp": "2026-04-25 06:58:53,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14117
          },
          {
            "timestamp": "2026-04-25 06:58:53,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14118
          },
          {
            "timestamp": "2026-04-25 06:58:53,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14119
          },
          {
            "timestamp": "2026-04-25 06:58:53,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14120
          },
          {
            "timestamp": "2026-04-25 06:58:53,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14121
          },
          {
            "timestamp": "2026-04-25 06:58:53,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14122
          },
          {
            "timestamp": "2026-04-25 06:58:53,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14123
          },
          {
            "timestamp": "2026-04-25 06:58:53,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14124
          },
          {
            "timestamp": "2026-04-25 06:58:53,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14125
          },
          {
            "timestamp": "2026-04-25 06:58:53,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14126
          },
          {
            "timestamp": "2026-04-25 06:58:53,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14127
          },
          {
            "timestamp": "2026-04-25 06:58:53,594",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14128
          },
          {
            "timestamp": "2026-04-25 06:58:53,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14129
          },
          {
            "timestamp": "2026-04-25 06:58:53,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14130
          },
          {
            "timestamp": "2026-04-25 06:58:53,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14131
          },
          {
            "timestamp": "2026-04-25 06:58:53,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14132
          },
          {
            "timestamp": "2026-04-25 06:58:53,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14133
          },
          {
            "timestamp": "2026-04-25 06:58:53,719",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14134
          },
          {
            "timestamp": "2026-04-25 06:58:53,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14135
          },
          {
            "timestamp": "2026-04-25 06:58:53,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14136
          },
          {
            "timestamp": "2026-04-25 06:58:53,751",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14137
          },
          {
            "timestamp": "2026-04-25 06:58:53,751",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14138
          },
          {
            "timestamp": "2026-04-25 06:58:53,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14139
          },
          {
            "timestamp": "2026-04-25 06:58:53,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14140
          },
          {
            "timestamp": "2026-04-25 06:58:53,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14141
          },
          {
            "timestamp": "2026-04-25 06:58:53,844",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14142
          },
          {
            "timestamp": "2026-04-25 06:58:53,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14143
          },
          {
            "timestamp": "2026-04-25 06:58:53,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14144
          },
          {
            "timestamp": "2026-04-25 06:58:53,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14145
          },
          {
            "timestamp": "2026-04-25 06:58:53,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14146
          },
          {
            "timestamp": "2026-04-25 06:58:53,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14147
          },
          {
            "timestamp": "2026-04-25 06:58:53,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14148
          },
          {
            "timestamp": "2026-04-25 06:58:53,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14149
          },
          {
            "timestamp": "2026-04-25 06:58:53,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14150
          },
          {
            "timestamp": "2026-04-25 06:58:53,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14151
          },
          {
            "timestamp": "2026-04-25 06:58:54,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14152
          },
          {
            "timestamp": "2026-04-25 06:58:54,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14153
          },
          {
            "timestamp": "2026-04-25 06:58:54,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14154
          },
          {
            "timestamp": "2026-04-25 06:58:54,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14155
          },
          {
            "timestamp": "2026-04-25 06:58:54,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14156
          },
          {
            "timestamp": "2026-04-25 06:58:54,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14157
          },
          {
            "timestamp": "2026-04-25 06:58:54,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14158
          },
          {
            "timestamp": "2026-04-25 06:58:54,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14159
          },
          {
            "timestamp": "2026-04-25 06:58:54,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14160
          },
          {
            "timestamp": "2026-04-25 06:58:54,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14161
          },
          {
            "timestamp": "2026-04-25 06:58:54,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14162
          },
          {
            "timestamp": "2026-04-25 06:58:54,266",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14163
          },
          {
            "timestamp": "2026-04-25 06:58:54,266",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14164
          },
          {
            "timestamp": "2026-04-25 06:58:54,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14165
          },
          {
            "timestamp": "2026-04-25 06:58:54,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14166
          },
          {
            "timestamp": "2026-04-25 06:58:54,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14167
          },
          {
            "timestamp": "2026-04-25 06:58:54,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14168
          },
          {
            "timestamp": "2026-04-25 06:58:54,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14169
          },
          {
            "timestamp": "2026-04-25 06:58:54,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14170
          },
          {
            "timestamp": "2026-04-25 06:58:54,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14171
          },
          {
            "timestamp": "2026-04-25 06:58:54,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14172
          },
          {
            "timestamp": "2026-04-25 06:58:54,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14173
          },
          {
            "timestamp": "2026-04-25 06:58:54,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14174
          },
          {
            "timestamp": "2026-04-25 06:58:54,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14175
          },
          {
            "timestamp": "2026-04-25 06:58:54,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14176
          },
          {
            "timestamp": "2026-04-25 06:58:54,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14177
          },
          {
            "timestamp": "2026-04-25 06:58:54,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14178
          },
          {
            "timestamp": "2026-04-25 06:58:54,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14179
          },
          {
            "timestamp": "2026-04-25 06:58:54,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14180
          },
          {
            "timestamp": "2026-04-25 06:58:54,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14181
          },
          {
            "timestamp": "2026-04-25 06:58:54,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14182
          },
          {
            "timestamp": "2026-04-25 06:58:54,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14183
          },
          {
            "timestamp": "2026-04-25 06:58:54,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14184
          },
          {
            "timestamp": "2026-04-25 06:58:54,657",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14185
          },
          {
            "timestamp": "2026-04-25 06:58:54,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14186
          },
          {
            "timestamp": "2026-04-25 06:58:54,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14187
          },
          {
            "timestamp": "2026-04-25 06:58:54,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14188
          },
          {
            "timestamp": "2026-04-25 06:58:54,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14189
          },
          {
            "timestamp": "2026-04-25 06:58:54,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14190
          },
          {
            "timestamp": "2026-04-25 06:58:54,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14191
          },
          {
            "timestamp": "2026-04-25 06:58:54,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14192
          },
          {
            "timestamp": "2026-04-25 06:58:54,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14193
          },
          {
            "timestamp": "2026-04-25 06:58:54,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14194
          },
          {
            "timestamp": "2026-04-25 06:58:54,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14195
          },
          {
            "timestamp": "2026-04-25 06:58:54,782",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14196
          },
          {
            "timestamp": "2026-04-25 06:58:54,782",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14197
          },
          {
            "timestamp": "2026-04-25 06:58:54,844",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14198
          },
          {
            "timestamp": "2026-04-25 06:58:54,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14199
          },
          {
            "timestamp": "2026-04-25 06:58:54,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14200
          },
          {
            "timestamp": "2026-04-25 06:58:54,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14201
          },
          {
            "timestamp": "2026-04-25 06:58:54,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14202
          },
          {
            "timestamp": "2026-04-25 06:58:54,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14203
          },
          {
            "timestamp": "2026-04-25 06:58:54,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14204
          },
          {
            "timestamp": "2026-04-25 06:58:54,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14205
          },
          {
            "timestamp": "2026-04-25 06:58:54,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14206
          },
          {
            "timestamp": "2026-04-25 06:58:54,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14207
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x7385b070",
            "parentcaller": "0x7385b08b",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "16"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "8160"
              }
            ],
            "repeated": 0,
            "id": 14208
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x7726074f",
            "parentcaller": "0x77bfbb70",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "oleaut32.dll"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76060000"
              }
            ],
            "repeated": 0,
            "id": 14209
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x77eab5a6",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0xfffffffe"
              },
              {
                "name": "ThreadInformationClass",
                "value": "12"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "8160"
              }
            ],
            "repeated": 0,
            "id": 14210
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x747cad94",
            "parentcaller": "0x747ca15c",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000610"
              }
            ],
            "repeated": 0,
            "id": 14211
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14212
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14213
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14214
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x774e45ae",
            "parentcaller": "0x774e442c",
            "category": "misc",
            "api": "GetKeyboardLayout",
            "status": true,
            "return": "0x04190419",
            "arguments": [
              {
                "name": "KeyboardLayout",
                "value": "0x00000419"
              },
              {
                "name": "LanguageName",
                "value": "Russian"
              }
            ],
            "repeated": 0,
            "id": 14215
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x7726269a",
            "parentcaller": "0x76645041",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005c0"
              }
            ],
            "repeated": 0,
            "id": 14216
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c192",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000064c"
              }
            ],
            "repeated": 0,
            "id": 14217
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x7726269a",
            "parentcaller": "0x7693c214",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000604"
              }
            ],
            "repeated": 0,
            "id": 14218
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14219
          },
          {
            "timestamp": "2026-04-25 06:58:55,032",
            "thread_id": "8160",
            "caller": "0x77eab5c9",
            "parentcaller": "0x76acfa30",
            "category": "threading",
            "api": "NtTerminateThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000000"
              },
              {
                "name": "ExitStatus",
                "value": "0x00000000"
              },
              {
                "name": "ThreadId",
                "value": "0"
              },
              {
                "name": "ProcessId",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 14220
          },
          {
            "timestamp": "2026-04-25 06:58:55,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14221
          },
          {
            "timestamp": "2026-04-25 06:58:55,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14222
          },
          {
            "timestamp": "2026-04-25 06:58:55,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14223
          },
          {
            "timestamp": "2026-04-25 06:58:55,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14224
          },
          {
            "timestamp": "2026-04-25 06:58:55,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14225
          },
          {
            "timestamp": "2026-04-25 06:58:55,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14226
          },
          {
            "timestamp": "2026-04-25 06:58:55,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14227
          },
          {
            "timestamp": "2026-04-25 06:58:55,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14228
          },
          {
            "timestamp": "2026-04-25 06:58:55,219",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14229
          },
          {
            "timestamp": "2026-04-25 06:58:55,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14230
          },
          {
            "timestamp": "2026-04-25 06:58:55,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14231
          },
          {
            "timestamp": "2026-04-25 06:58:55,282",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14232
          },
          {
            "timestamp": "2026-04-25 06:58:55,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14233
          },
          {
            "timestamp": "2026-04-25 06:58:55,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14234
          },
          {
            "timestamp": "2026-04-25 06:58:55,297",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14235
          },
          {
            "timestamp": "2026-04-25 06:58:55,297",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14236
          },
          {
            "timestamp": "2026-04-25 06:58:55,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14237
          },
          {
            "timestamp": "2026-04-25 06:58:55,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14238
          },
          {
            "timestamp": "2026-04-25 06:58:55,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14239
          },
          {
            "timestamp": "2026-04-25 06:58:55,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14240
          },
          {
            "timestamp": "2026-04-25 06:58:55,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14241
          },
          {
            "timestamp": "2026-04-25 06:58:55,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14242
          },
          {
            "timestamp": "2026-04-25 06:58:55,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14243
          },
          {
            "timestamp": "2026-04-25 06:58:55,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14244
          },
          {
            "timestamp": "2026-04-25 06:58:55,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14245
          },
          {
            "timestamp": "2026-04-25 06:58:55,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14246
          },
          {
            "timestamp": "2026-04-25 06:58:55,485",
            "thread_id": "6220",
            "caller": "0x05076b9e",
            "parentcaller": "0x05076bc7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20000"
              }
            ],
            "repeated": 0,
            "id": 14247
          },
          {
            "timestamp": "2026-04-25 06:58:55,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14248
          },
          {
            "timestamp": "2026-04-25 06:58:55,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14249
          },
          {
            "timestamp": "2026-04-25 06:58:55,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14250
          },
          {
            "timestamp": "2026-04-25 06:58:55,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14251
          },
          {
            "timestamp": "2026-04-25 06:58:55,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14252
          },
          {
            "timestamp": "2026-04-25 06:58:55,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14253
          },
          {
            "timestamp": "2026-04-25 06:58:55,594",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14254
          },
          {
            "timestamp": "2026-04-25 06:58:55,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14255
          },
          {
            "timestamp": "2026-04-25 06:58:55,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14256
          },
          {
            "timestamp": "2026-04-25 06:58:55,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14257
          },
          {
            "timestamp": "2026-04-25 06:58:55,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14258
          },
          {
            "timestamp": "2026-04-25 06:58:55,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14259
          },
          {
            "timestamp": "2026-04-25 06:58:55,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14260
          },
          {
            "timestamp": "2026-04-25 06:58:55,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14261
          },
          {
            "timestamp": "2026-04-25 06:58:55,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14262
          },
          {
            "timestamp": "2026-04-25 06:58:55,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14263
          },
          {
            "timestamp": "2026-04-25 06:58:55,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14264
          },
          {
            "timestamp": "2026-04-25 06:58:55,813",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14265
          },
          {
            "timestamp": "2026-04-25 06:58:55,813",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14266
          },
          {
            "timestamp": "2026-04-25 06:58:55,844",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14267
          },
          {
            "timestamp": "2026-04-25 06:58:55,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14268
          },
          {
            "timestamp": "2026-04-25 06:58:55,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14269
          },
          {
            "timestamp": "2026-04-25 06:58:55,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14270
          },
          {
            "timestamp": "2026-04-25 06:58:55,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14271
          },
          {
            "timestamp": "2026-04-25 06:58:55,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14272
          },
          {
            "timestamp": "2026-04-25 06:58:55,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14273
          },
          {
            "timestamp": "2026-04-25 06:58:55,969",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14274
          },
          {
            "timestamp": "2026-04-25 06:58:55,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14275
          },
          {
            "timestamp": "2026-04-25 06:58:55,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14276
          },
          {
            "timestamp": "2026-04-25 06:58:55,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14277
          },
          {
            "timestamp": "2026-04-25 06:58:56,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14278
          },
          {
            "timestamp": "2026-04-25 06:58:56,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14279
          },
          {
            "timestamp": "2026-04-25 06:58:56,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14280
          },
          {
            "timestamp": "2026-04-25 06:58:56,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14281
          },
          {
            "timestamp": "2026-04-25 06:58:56,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14282
          },
          {
            "timestamp": "2026-04-25 06:58:56,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14283
          },
          {
            "timestamp": "2026-04-25 06:58:56,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14284
          },
          {
            "timestamp": "2026-04-25 06:58:56,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14285
          },
          {
            "timestamp": "2026-04-25 06:58:56,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14286
          },
          {
            "timestamp": "2026-04-25 06:58:56,157",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14287
          },
          {
            "timestamp": "2026-04-25 06:58:56,219",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14288
          },
          {
            "timestamp": "2026-04-25 06:58:56,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14289
          },
          {
            "timestamp": "2026-04-25 06:58:56,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14290
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "1416",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x067eb000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 14291
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14292
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14293
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x0000051c",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1308"
              }
            ],
            "repeated": 0,
            "id": 14294
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 14295
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 14296
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000051c"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 14297
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 14298
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "6948",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 14299
          },
          {
            "timestamp": "2026-04-25 06:58:56,235",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14300
          },
          {
            "timestamp": "2026-04-25 06:58:56,251",
            "thread_id": "800",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14301
          },
          {
            "timestamp": "2026-04-25 06:58:56,251",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 14302
          },
          {
            "timestamp": "2026-04-25 06:58:56,251",
            "thread_id": "800",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 14303
          },
          {
            "timestamp": "2026-04-25 06:58:56,251",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14304
          },
          {
            "timestamp": "2026-04-25 06:58:56,251",
            "thread_id": "800",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14305
          },
          {
            "timestamp": "2026-04-25 06:58:56,251",
            "thread_id": "800",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1308"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 14306
          },
          {
            "timestamp": "2026-04-25 06:58:56,251",
            "thread_id": "800",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              }
            ],
            "repeated": 0,
            "id": 14307
          },
          {
            "timestamp": "2026-04-25 06:58:56,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14308
          },
          {
            "timestamp": "2026-04-25 06:58:56,282",
            "thread_id": "1128",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1308"
              }
            ],
            "repeated": 0,
            "id": 14309
          },
          {
            "timestamp": "2026-04-25 06:58:56,282",
            "thread_id": "1128",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 14310
          },
          {
            "timestamp": "2026-04-25 06:58:56,282",
            "thread_id": "1128",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 14311
          },
          {
            "timestamp": "2026-04-25 06:58:56,282",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 14312
          },
          {
            "timestamp": "2026-04-25 06:58:56,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 14313
          },
          {
            "timestamp": "2026-04-25 06:58:56,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14314
          },
          {
            "timestamp": "2026-04-25 06:58:56,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14315
          },
          {
            "timestamp": "2026-04-25 06:58:56,329",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14316
          },
          {
            "timestamp": "2026-04-25 06:58:56,329",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14317
          },
          {
            "timestamp": "2026-04-25 06:58:56,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14318
          },
          {
            "timestamp": "2026-04-25 06:58:56,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14319
          },
          {
            "timestamp": "2026-04-25 06:58:56,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14320
          },
          {
            "timestamp": "2026-04-25 06:58:56,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14321
          },
          {
            "timestamp": "2026-04-25 06:58:56,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14322
          },
          {
            "timestamp": "2026-04-25 06:58:56,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14323
          },
          {
            "timestamp": "2026-04-25 06:58:56,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14324
          },
          {
            "timestamp": "2026-04-25 06:58:56,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14325
          },
          {
            "timestamp": "2026-04-25 06:58:56,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14326
          },
          {
            "timestamp": "2026-04-25 06:58:56,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14327
          },
          {
            "timestamp": "2026-04-25 06:58:56,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14328
          },
          {
            "timestamp": "2026-04-25 06:58:56,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14329
          },
          {
            "timestamp": "2026-04-25 06:58:56,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14330
          },
          {
            "timestamp": "2026-04-25 06:58:56,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14331
          },
          {
            "timestamp": "2026-04-25 06:58:56,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14332
          },
          {
            "timestamp": "2026-04-25 06:58:56,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14333
          },
          {
            "timestamp": "2026-04-25 06:58:56,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14334
          },
          {
            "timestamp": "2026-04-25 06:58:56,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14335
          },
          {
            "timestamp": "2026-04-25 06:58:56,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14336
          },
          {
            "timestamp": "2026-04-25 06:58:56,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14337
          },
          {
            "timestamp": "2026-04-25 06:58:56,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14338
          },
          {
            "timestamp": "2026-04-25 06:58:56,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14339
          },
          {
            "timestamp": "2026-04-25 06:58:56,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14340
          },
          {
            "timestamp": "2026-04-25 06:58:56,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14341
          },
          {
            "timestamp": "2026-04-25 06:58:56,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14342
          },
          {
            "timestamp": "2026-04-25 06:58:56,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14343
          },
          {
            "timestamp": "2026-04-25 06:58:56,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14344
          },
          {
            "timestamp": "2026-04-25 06:58:56,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14345
          },
          {
            "timestamp": "2026-04-25 06:58:56,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14346
          },
          {
            "timestamp": "2026-04-25 06:58:56,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14347
          },
          {
            "timestamp": "2026-04-25 06:58:56,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14348
          },
          {
            "timestamp": "2026-04-25 06:58:56,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14349
          },
          {
            "timestamp": "2026-04-25 06:58:56,844",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14350
          },
          {
            "timestamp": "2026-04-25 06:58:56,844",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14351
          },
          {
            "timestamp": "2026-04-25 06:58:56,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14352
          },
          {
            "timestamp": "2026-04-25 06:58:56,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14353
          },
          {
            "timestamp": "2026-04-25 06:58:56,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14354
          },
          {
            "timestamp": "2026-04-25 06:58:56,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14355
          },
          {
            "timestamp": "2026-04-25 06:58:56,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14356
          },
          {
            "timestamp": "2026-04-25 06:58:56,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14357
          },
          {
            "timestamp": "2026-04-25 06:58:56,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14358
          },
          {
            "timestamp": "2026-04-25 06:58:56,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14359
          },
          {
            "timestamp": "2026-04-25 06:58:57,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14360
          },
          {
            "timestamp": "2026-04-25 06:58:57,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14361
          },
          {
            "timestamp": "2026-04-25 06:58:57,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14362
          },
          {
            "timestamp": "2026-04-25 06:58:57,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14363
          },
          {
            "timestamp": "2026-04-25 06:58:57,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14364
          },
          {
            "timestamp": "2026-04-25 06:58:57,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14365
          },
          {
            "timestamp": "2026-04-25 06:58:57,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14366
          },
          {
            "timestamp": "2026-04-25 06:58:57,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14367
          },
          {
            "timestamp": "2026-04-25 06:58:57,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14368
          },
          {
            "timestamp": "2026-04-25 06:58:57,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14369
          },
          {
            "timestamp": "2026-04-25 06:58:57,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14370
          },
          {
            "timestamp": "2026-04-25 06:58:57,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14371
          },
          {
            "timestamp": "2026-04-25 06:58:57,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14372
          },
          {
            "timestamp": "2026-04-25 06:58:57,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14373
          },
          {
            "timestamp": "2026-04-25 06:58:57,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14374
          },
          {
            "timestamp": "2026-04-25 06:58:57,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14375
          },
          {
            "timestamp": "2026-04-25 06:58:57,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14376
          },
          {
            "timestamp": "2026-04-25 06:58:57,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14377
          },
          {
            "timestamp": "2026-04-25 06:58:57,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14378
          },
          {
            "timestamp": "2026-04-25 06:58:57,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14379
          },
          {
            "timestamp": "2026-04-25 06:58:57,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14380
          },
          {
            "timestamp": "2026-04-25 06:58:57,360",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14381
          },
          {
            "timestamp": "2026-04-25 06:58:57,360",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14382
          },
          {
            "timestamp": "2026-04-25 06:58:57,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14383
          },
          {
            "timestamp": "2026-04-25 06:58:57,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14384
          },
          {
            "timestamp": "2026-04-25 06:58:57,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14385
          },
          {
            "timestamp": "2026-04-25 06:58:57,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14386
          },
          {
            "timestamp": "2026-04-25 06:58:57,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14387
          },
          {
            "timestamp": "2026-04-25 06:58:57,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14388
          },
          {
            "timestamp": "2026-04-25 06:58:57,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14389
          },
          {
            "timestamp": "2026-04-25 06:58:57,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14390
          },
          {
            "timestamp": "2026-04-25 06:58:57,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14391
          },
          {
            "timestamp": "2026-04-25 06:58:57,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14392
          },
          {
            "timestamp": "2026-04-25 06:58:57,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14393
          },
          {
            "timestamp": "2026-04-25 06:58:57,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14394
          },
          {
            "timestamp": "2026-04-25 06:58:57,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14395
          },
          {
            "timestamp": "2026-04-25 06:58:57,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14396
          },
          {
            "timestamp": "2026-04-25 06:58:57,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14397
          },
          {
            "timestamp": "2026-04-25 06:58:57,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14398
          },
          {
            "timestamp": "2026-04-25 06:58:57,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14399
          },
          {
            "timestamp": "2026-04-25 06:58:57,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14400
          },
          {
            "timestamp": "2026-04-25 06:58:57,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14401
          },
          {
            "timestamp": "2026-04-25 06:58:57,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14402
          },
          {
            "timestamp": "2026-04-25 06:58:57,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14403
          },
          {
            "timestamp": "2026-04-25 06:58:57,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14404
          },
          {
            "timestamp": "2026-04-25 06:58:57,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14405
          },
          {
            "timestamp": "2026-04-25 06:58:57,876",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14406
          },
          {
            "timestamp": "2026-04-25 06:58:57,876",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14407
          },
          {
            "timestamp": "2026-04-25 06:58:57,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14408
          },
          {
            "timestamp": "2026-04-25 06:58:57,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14409
          },
          {
            "timestamp": "2026-04-25 06:58:57,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14410
          },
          {
            "timestamp": "2026-04-25 06:58:57,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14411
          },
          {
            "timestamp": "2026-04-25 06:58:57,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14412
          },
          {
            "timestamp": "2026-04-25 06:58:57,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14413
          },
          {
            "timestamp": "2026-04-25 06:58:57,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14414
          },
          {
            "timestamp": "2026-04-25 06:58:58,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14415
          },
          {
            "timestamp": "2026-04-25 06:58:58,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14416
          },
          {
            "timestamp": "2026-04-25 06:58:58,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14417
          },
          {
            "timestamp": "2026-04-25 06:58:58,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14418
          },
          {
            "timestamp": "2026-04-25 06:58:58,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14419
          },
          {
            "timestamp": "2026-04-25 06:58:58,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14420
          },
          {
            "timestamp": "2026-04-25 06:58:58,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14421
          },
          {
            "timestamp": "2026-04-25 06:58:58,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14422
          },
          {
            "timestamp": "2026-04-25 06:58:58,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14423
          },
          {
            "timestamp": "2026-04-25 06:58:58,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14424
          },
          {
            "timestamp": "2026-04-25 06:58:58,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14425
          },
          {
            "timestamp": "2026-04-25 06:58:58,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14426
          },
          {
            "timestamp": "2026-04-25 06:58:58,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14427
          },
          {
            "timestamp": "2026-04-25 06:58:58,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14428
          },
          {
            "timestamp": "2026-04-25 06:58:58,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14429
          },
          {
            "timestamp": "2026-04-25 06:58:58,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14430
          },
          {
            "timestamp": "2026-04-25 06:58:58,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14431
          },
          {
            "timestamp": "2026-04-25 06:58:58,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14432
          },
          {
            "timestamp": "2026-04-25 06:58:58,391",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14433
          },
          {
            "timestamp": "2026-04-25 06:58:58,391",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14434
          },
          {
            "timestamp": "2026-04-25 06:58:58,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14435
          },
          {
            "timestamp": "2026-04-25 06:58:58,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14436
          },
          {
            "timestamp": "2026-04-25 06:58:58,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14437
          },
          {
            "timestamp": "2026-04-25 06:58:58,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14438
          },
          {
            "timestamp": "2026-04-25 06:58:58,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14439
          },
          {
            "timestamp": "2026-04-25 06:58:58,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14440
          },
          {
            "timestamp": "2026-04-25 06:58:58,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14441
          },
          {
            "timestamp": "2026-04-25 06:58:58,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14442
          },
          {
            "timestamp": "2026-04-25 06:58:58,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14443
          },
          {
            "timestamp": "2026-04-25 06:58:58,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14444
          },
          {
            "timestamp": "2026-04-25 06:58:58,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14445
          },
          {
            "timestamp": "2026-04-25 06:58:58,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14446
          },
          {
            "timestamp": "2026-04-25 06:58:58,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14447
          },
          {
            "timestamp": "2026-04-25 06:58:58,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14448
          },
          {
            "timestamp": "2026-04-25 06:58:58,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14449
          },
          {
            "timestamp": "2026-04-25 06:58:58,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14450
          },
          {
            "timestamp": "2026-04-25 06:58:58,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14451
          },
          {
            "timestamp": "2026-04-25 06:58:58,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14452
          },
          {
            "timestamp": "2026-04-25 06:58:58,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14453
          },
          {
            "timestamp": "2026-04-25 06:58:58,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14454
          },
          {
            "timestamp": "2026-04-25 06:58:58,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14455
          },
          {
            "timestamp": "2026-04-25 06:58:58,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14456
          },
          {
            "timestamp": "2026-04-25 06:58:58,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14457
          },
          {
            "timestamp": "2026-04-25 06:58:58,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14458
          },
          {
            "timestamp": "2026-04-25 06:58:58,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14459
          },
          {
            "timestamp": "2026-04-25 06:58:58,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14460
          },
          {
            "timestamp": "2026-04-25 06:58:58,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14461
          },
          {
            "timestamp": "2026-04-25 06:58:58,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14462
          },
          {
            "timestamp": "2026-04-25 06:58:58,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14463
          },
          {
            "timestamp": "2026-04-25 06:58:58,907",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14464
          },
          {
            "timestamp": "2026-04-25 06:58:58,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14465
          },
          {
            "timestamp": "2026-04-25 06:58:58,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14466
          },
          {
            "timestamp": "2026-04-25 06:58:58,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14467
          },
          {
            "timestamp": "2026-04-25 06:58:59,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14468
          },
          {
            "timestamp": "2026-04-25 06:58:59,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14469
          },
          {
            "timestamp": "2026-04-25 06:58:59,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14470
          },
          {
            "timestamp": "2026-04-25 06:58:59,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14471
          },
          {
            "timestamp": "2026-04-25 06:58:59,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14472
          },
          {
            "timestamp": "2026-04-25 06:58:59,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14473
          },
          {
            "timestamp": "2026-04-25 06:58:59,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14474
          },
          {
            "timestamp": "2026-04-25 06:58:59,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14475
          },
          {
            "timestamp": "2026-04-25 06:58:59,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14476
          },
          {
            "timestamp": "2026-04-25 06:58:59,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14477
          },
          {
            "timestamp": "2026-04-25 06:58:59,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14478
          },
          {
            "timestamp": "2026-04-25 06:58:59,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14479
          },
          {
            "timestamp": "2026-04-25 06:58:59,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14480
          },
          {
            "timestamp": "2026-04-25 06:58:59,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14481
          },
          {
            "timestamp": "2026-04-25 06:58:59,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14482
          },
          {
            "timestamp": "2026-04-25 06:58:59,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14483
          },
          {
            "timestamp": "2026-04-25 06:58:59,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14484
          },
          {
            "timestamp": "2026-04-25 06:58:59,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14485
          },
          {
            "timestamp": "2026-04-25 06:58:59,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14486
          },
          {
            "timestamp": "2026-04-25 06:58:59,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14487
          },
          {
            "timestamp": "2026-04-25 06:58:59,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14488
          },
          {
            "timestamp": "2026-04-25 06:58:59,422",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14489
          },
          {
            "timestamp": "2026-04-25 06:58:59,422",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14490
          },
          {
            "timestamp": "2026-04-25 06:58:59,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14491
          },
          {
            "timestamp": "2026-04-25 06:58:59,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14492
          },
          {
            "timestamp": "2026-04-25 06:58:59,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14493
          },
          {
            "timestamp": "2026-04-25 06:58:59,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14494
          },
          {
            "timestamp": "2026-04-25 06:58:59,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14495
          },
          {
            "timestamp": "2026-04-25 06:58:59,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14496
          },
          {
            "timestamp": "2026-04-25 06:58:59,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14497
          },
          {
            "timestamp": "2026-04-25 06:58:59,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14498
          },
          {
            "timestamp": "2026-04-25 06:58:59,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14499
          },
          {
            "timestamp": "2026-04-25 06:58:59,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14500
          },
          {
            "timestamp": "2026-04-25 06:58:59,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14501
          },
          {
            "timestamp": "2026-04-25 06:58:59,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14502
          },
          {
            "timestamp": "2026-04-25 06:58:59,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14503
          },
          {
            "timestamp": "2026-04-25 06:58:59,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14504
          },
          {
            "timestamp": "2026-04-25 06:58:59,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14505
          },
          {
            "timestamp": "2026-04-25 06:58:59,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14506
          },
          {
            "timestamp": "2026-04-25 06:58:59,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14507
          },
          {
            "timestamp": "2026-04-25 06:58:59,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14508
          },
          {
            "timestamp": "2026-04-25 06:58:59,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14509
          },
          {
            "timestamp": "2026-04-25 06:58:59,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14510
          },
          {
            "timestamp": "2026-04-25 06:58:59,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14511
          },
          {
            "timestamp": "2026-04-25 06:58:59,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14512
          },
          {
            "timestamp": "2026-04-25 06:58:59,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14513
          },
          {
            "timestamp": "2026-04-25 06:58:59,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14514
          },
          {
            "timestamp": "2026-04-25 06:58:59,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14515
          },
          {
            "timestamp": "2026-04-25 06:58:59,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14516
          },
          {
            "timestamp": "2026-04-25 06:58:59,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14517
          },
          {
            "timestamp": "2026-04-25 06:58:59,938",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14518
          },
          {
            "timestamp": "2026-04-25 06:58:59,938",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14519
          },
          {
            "timestamp": "2026-04-25 06:58:59,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14520
          },
          {
            "timestamp": "2026-04-25 06:58:59,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14521
          },
          {
            "timestamp": "2026-04-25 06:58:59,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14522
          },
          {
            "timestamp": "2026-04-25 06:58:59,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14523
          },
          {
            "timestamp": "2026-04-25 06:59:00,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14524
          },
          {
            "timestamp": "2026-04-25 06:59:00,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14525
          },
          {
            "timestamp": "2026-04-25 06:59:00,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14526
          },
          {
            "timestamp": "2026-04-25 06:59:00,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14527
          },
          {
            "timestamp": "2026-04-25 06:59:00,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14528
          },
          {
            "timestamp": "2026-04-25 06:59:00,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14529
          },
          {
            "timestamp": "2026-04-25 06:59:00,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14530
          },
          {
            "timestamp": "2026-04-25 06:59:00,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14531
          },
          {
            "timestamp": "2026-04-25 06:59:00,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14532
          },
          {
            "timestamp": "2026-04-25 06:59:00,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14533
          },
          {
            "timestamp": "2026-04-25 06:59:00,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14534
          },
          {
            "timestamp": "2026-04-25 06:59:00,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14535
          },
          {
            "timestamp": "2026-04-25 06:59:00,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14536
          },
          {
            "timestamp": "2026-04-25 06:59:00,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14537
          },
          {
            "timestamp": "2026-04-25 06:59:00,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14538
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0680b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 14539
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14540
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14541
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14542
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x000005f4",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1524"
              }
            ],
            "repeated": 0,
            "id": 14543
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1524"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 14544
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1524"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 14545
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 14546
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14547
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14548
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x000005f4"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 14549
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1524"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 14550
          },
          {
            "timestamp": "2026-04-25 06:59:00,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14551
          },
          {
            "timestamp": "2026-04-25 06:59:00,313",
            "thread_id": "1128",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1524"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14552
          },
          {
            "timestamp": "2026-04-25 06:59:00,313",
            "thread_id": "1128",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 14553
          },
          {
            "timestamp": "2026-04-25 06:59:00,313",
            "thread_id": "1128",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 14554
          },
          {
            "timestamp": "2026-04-25 06:59:00,313",
            "thread_id": "1128",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14555
          },
          {
            "timestamp": "2026-04-25 06:59:00,313",
            "thread_id": "1128",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14556
          },
          {
            "timestamp": "2026-04-25 06:59:00,313",
            "thread_id": "1128",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1524"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 14557
          },
          {
            "timestamp": "2026-04-25 06:59:00,313",
            "thread_id": "1128",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1524"
              }
            ],
            "repeated": 0,
            "id": 14558
          },
          {
            "timestamp": "2026-04-25 06:59:00,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14559
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14560
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14561
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14562
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "1128",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1524"
              }
            ],
            "repeated": 0,
            "id": 14563
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "1128",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 14564
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "1128",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 14565
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 14566
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 14567
          },
          {
            "timestamp": "2026-04-25 06:59:00,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14568
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "800",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "NtCreateThreadEx",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x0000060c"
              },
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "StartAddress",
                "value": "0x738e890c"
              },
              {
                "name": "Parameter",
                "value": "0x00cc26a8"
              },
              {
                "name": "CreateFlags",
                "value": "0x00000001"
              },
              {
                "name": "ThreadId",
                "value": "5968"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              },
              {
                "name": "Module",
                "value": "mscorwks.dll"
              }
            ],
            "repeated": 0,
            "id": 14569
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "800",
            "caller": "0x77276987",
            "parentcaller": "0x76ad0f37",
            "category": "threading",
            "api": "CreateThread",
            "status": true,
            "return": "0x0000060c",
            "arguments": [
              {
                "name": "StartRoutine",
                "value": "0x738e890c"
              },
              {
                "name": "ModuleName",
                "value": "mscorwks.dll"
              },
              {
                "name": "Parameter",
                "value": "0x00cc26a8"
              },
              {
                "name": "CreationFlags",
                "value": "0x00000004"
              },
              {
                "name": "ThreadId",
                "value": "5968"
              }
            ],
            "repeated": 0,
            "id": 14570
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "800",
            "caller": "0x7727d303",
            "parentcaller": "0x7380ba5f",
            "category": "threading",
            "api": "NtResumeThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x0000060c"
              },
              {
                "name": "SuspendCount",
                "value": "1"
              },
              {
                "name": "ThreadId",
                "value": "5968"
              },
              {
                "name": "ProcessId",
                "value": "6484"
              }
            ],
            "repeated": 0,
            "id": 14571
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "5968",
            "caller": "0x7726f231",
            "parentcaller": "0x736e2c18",
            "category": "system",
            "api": "LdrGetDllHandle",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileName",
                "value": "KERNEL32.DLL"
              },
              {
                "name": "ModuleHandle",
                "value": "0x76ab0000"
              }
            ],
            "repeated": 2,
            "id": 14572
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "5968",
            "caller": "0x77ea64d6",
            "parentcaller": "0x77ea63e1",
            "category": "threading",
            "api": "NtTestAlert",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14573
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "5968",
            "caller": "0x00000000",
            "parentcaller": "0x00000000",
            "category": "threading",
            "api": "RtlUserThreadStart",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "StartAddress",
                "value": "0x00000000"
              },
              {
                "name": "Parameter",
                "value": "0x00000000"
              }
            ],
            "repeated": 0,
            "id": 14574
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "5968",
            "caller": "0x7380aa35",
            "parentcaller": "0x7380aa9a",
            "category": "threading",
            "api": "SetThreadStackGuarantee",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "InputSize",
                "value": "4096"
              },
              {
                "name": "OutputSize",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 14575
          },
          {
            "timestamp": "2026-04-25 06:59:00,360",
            "thread_id": "5968",
            "caller": "0x772761f1",
            "parentcaller": "0x7380ab1a",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x084d1000"
              },
              {
                "name": "RegionSize",
                "value": "0x000fa000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 14576
          },
          {
            "timestamp": "2026-04-25 06:59:00,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14577
          },
          {
            "timestamp": "2026-04-25 06:59:00,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14578
          },
          {
            "timestamp": "2026-04-25 06:59:00,454",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14579
          },
          {
            "timestamp": "2026-04-25 06:59:00,454",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14580
          },
          {
            "timestamp": "2026-04-25 06:59:00,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14581
          },
          {
            "timestamp": "2026-04-25 06:59:00,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14582
          },
          {
            "timestamp": "2026-04-25 06:59:00,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14583
          },
          {
            "timestamp": "2026-04-25 06:59:00,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14584
          },
          {
            "timestamp": "2026-04-25 06:59:00,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14585
          },
          {
            "timestamp": "2026-04-25 06:59:00,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14586
          },
          {
            "timestamp": "2026-04-25 06:59:00,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14587
          },
          {
            "timestamp": "2026-04-25 06:59:00,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14588
          },
          {
            "timestamp": "2026-04-25 06:59:00,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14589
          },
          {
            "timestamp": "2026-04-25 06:59:00,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14590
          },
          {
            "timestamp": "2026-04-25 06:59:00,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14591
          },
          {
            "timestamp": "2026-04-25 06:59:00,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14592
          },
          {
            "timestamp": "2026-04-25 06:59:00,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14593
          },
          {
            "timestamp": "2026-04-25 06:59:00,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14594
          },
          {
            "timestamp": "2026-04-25 06:59:00,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14595
          },
          {
            "timestamp": "2026-04-25 06:59:00,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14596
          },
          {
            "timestamp": "2026-04-25 06:59:00,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14597
          },
          {
            "timestamp": "2026-04-25 06:59:00,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14598
          },
          {
            "timestamp": "2026-04-25 06:59:00,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14599
          },
          {
            "timestamp": "2026-04-25 06:59:00,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14600
          },
          {
            "timestamp": "2026-04-25 06:59:00,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14601
          },
          {
            "timestamp": "2026-04-25 06:59:00,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14602
          },
          {
            "timestamp": "2026-04-25 06:59:00,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14603
          },
          {
            "timestamp": "2026-04-25 06:59:00,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14604
          },
          {
            "timestamp": "2026-04-25 06:59:00,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14605
          },
          {
            "timestamp": "2026-04-25 06:59:00,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14606
          },
          {
            "timestamp": "2026-04-25 06:59:00,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14607
          },
          {
            "timestamp": "2026-04-25 06:59:00,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14608
          },
          {
            "timestamp": "2026-04-25 06:59:00,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14609
          },
          {
            "timestamp": "2026-04-25 06:59:00,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14610
          },
          {
            "timestamp": "2026-04-25 06:59:00,969",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14611
          },
          {
            "timestamp": "2026-04-25 06:59:00,969",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14612
          },
          {
            "timestamp": "2026-04-25 06:59:01,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14613
          },
          {
            "timestamp": "2026-04-25 06:59:01,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14614
          },
          {
            "timestamp": "2026-04-25 06:59:01,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14615
          },
          {
            "timestamp": "2026-04-25 06:59:01,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14616
          },
          {
            "timestamp": "2026-04-25 06:59:01,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14617
          },
          {
            "timestamp": "2026-04-25 06:59:01,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14618
          },
          {
            "timestamp": "2026-04-25 06:59:01,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14619
          },
          {
            "timestamp": "2026-04-25 06:59:01,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14620
          },
          {
            "timestamp": "2026-04-25 06:59:01,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14621
          },
          {
            "timestamp": "2026-04-25 06:59:01,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14622
          },
          {
            "timestamp": "2026-04-25 06:59:01,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14623
          },
          {
            "timestamp": "2026-04-25 06:59:01,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14624
          },
          {
            "timestamp": "2026-04-25 06:59:01,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14625
          },
          {
            "timestamp": "2026-04-25 06:59:01,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14626
          },
          {
            "timestamp": "2026-04-25 06:59:01,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14627
          },
          {
            "timestamp": "2026-04-25 06:59:01,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14628
          },
          {
            "timestamp": "2026-04-25 06:59:01,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14629
          },
          {
            "timestamp": "2026-04-25 06:59:01,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14630
          },
          {
            "timestamp": "2026-04-25 06:59:01,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14631
          },
          {
            "timestamp": "2026-04-25 06:59:01,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14632
          },
          {
            "timestamp": "2026-04-25 06:59:01,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14633
          },
          {
            "timestamp": "2026-04-25 06:59:01,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14634
          },
          {
            "timestamp": "2026-04-25 06:59:01,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14635
          },
          {
            "timestamp": "2026-04-25 06:59:01,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14636
          },
          {
            "timestamp": "2026-04-25 06:59:01,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14637
          },
          {
            "timestamp": "2026-04-25 06:59:01,485",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14638
          },
          {
            "timestamp": "2026-04-25 06:59:01,485",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14639
          },
          {
            "timestamp": "2026-04-25 06:59:01,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14640
          },
          {
            "timestamp": "2026-04-25 06:59:01,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14641
          },
          {
            "timestamp": "2026-04-25 06:59:01,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14642
          },
          {
            "timestamp": "2026-04-25 06:59:01,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14643
          },
          {
            "timestamp": "2026-04-25 06:59:01,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14644
          },
          {
            "timestamp": "2026-04-25 06:59:01,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14645
          },
          {
            "timestamp": "2026-04-25 06:59:01,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14646
          },
          {
            "timestamp": "2026-04-25 06:59:01,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14647
          },
          {
            "timestamp": "2026-04-25 06:59:01,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14648
          },
          {
            "timestamp": "2026-04-25 06:59:01,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14649
          },
          {
            "timestamp": "2026-04-25 06:59:01,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14650
          },
          {
            "timestamp": "2026-04-25 06:59:01,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14651
          },
          {
            "timestamp": "2026-04-25 06:59:01,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14652
          },
          {
            "timestamp": "2026-04-25 06:59:01,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14653
          },
          {
            "timestamp": "2026-04-25 06:59:01,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14654
          },
          {
            "timestamp": "2026-04-25 06:59:01,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14655
          },
          {
            "timestamp": "2026-04-25 06:59:01,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14656
          },
          {
            "timestamp": "2026-04-25 06:59:01,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14657
          },
          {
            "timestamp": "2026-04-25 06:59:01,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14658
          },
          {
            "timestamp": "2026-04-25 06:59:01,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14659
          },
          {
            "timestamp": "2026-04-25 06:59:01,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14660
          },
          {
            "timestamp": "2026-04-25 06:59:01,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14661
          },
          {
            "timestamp": "2026-04-25 06:59:01,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14662
          },
          {
            "timestamp": "2026-04-25 06:59:01,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14663
          },
          {
            "timestamp": "2026-04-25 06:59:01,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14664
          },
          {
            "timestamp": "2026-04-25 06:59:01,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14665
          },
          {
            "timestamp": "2026-04-25 06:59:02,001",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14666
          },
          {
            "timestamp": "2026-04-25 06:59:02,001",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14667
          },
          {
            "timestamp": "2026-04-25 06:59:02,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14668
          },
          {
            "timestamp": "2026-04-25 06:59:02,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14669
          },
          {
            "timestamp": "2026-04-25 06:59:02,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14670
          },
          {
            "timestamp": "2026-04-25 06:59:02,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14671
          },
          {
            "timestamp": "2026-04-25 06:59:02,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14672
          },
          {
            "timestamp": "2026-04-25 06:59:02,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14673
          },
          {
            "timestamp": "2026-04-25 06:59:02,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14674
          },
          {
            "timestamp": "2026-04-25 06:59:02,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14675
          },
          {
            "timestamp": "2026-04-25 06:59:02,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14676
          },
          {
            "timestamp": "2026-04-25 06:59:02,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14677
          },
          {
            "timestamp": "2026-04-25 06:59:02,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14678
          },
          {
            "timestamp": "2026-04-25 06:59:02,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14679
          },
          {
            "timestamp": "2026-04-25 06:59:02,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14680
          },
          {
            "timestamp": "2026-04-25 06:59:02,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14681
          },
          {
            "timestamp": "2026-04-25 06:59:02,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14682
          },
          {
            "timestamp": "2026-04-25 06:59:02,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14683
          },
          {
            "timestamp": "2026-04-25 06:59:02,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14684
          },
          {
            "timestamp": "2026-04-25 06:59:02,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14685
          },
          {
            "timestamp": "2026-04-25 06:59:02,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14686
          },
          {
            "timestamp": "2026-04-25 06:59:02,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14687
          },
          {
            "timestamp": "2026-04-25 06:59:02,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14688
          },
          {
            "timestamp": "2026-04-25 06:59:02,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14689
          },
          {
            "timestamp": "2026-04-25 06:59:02,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14690
          },
          {
            "timestamp": "2026-04-25 06:59:02,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14691
          },
          {
            "timestamp": "2026-04-25 06:59:02,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14692
          },
          {
            "timestamp": "2026-04-25 06:59:02,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14693
          },
          {
            "timestamp": "2026-04-25 06:59:02,516",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14694
          },
          {
            "timestamp": "2026-04-25 06:59:02,516",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14695
          },
          {
            "timestamp": "2026-04-25 06:59:02,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14696
          },
          {
            "timestamp": "2026-04-25 06:59:02,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14697
          },
          {
            "timestamp": "2026-04-25 06:59:02,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14698
          },
          {
            "timestamp": "2026-04-25 06:59:02,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14699
          },
          {
            "timestamp": "2026-04-25 06:59:02,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14700
          },
          {
            "timestamp": "2026-04-25 06:59:02,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14701
          },
          {
            "timestamp": "2026-04-25 06:59:02,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14702
          },
          {
            "timestamp": "2026-04-25 06:59:02,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14703
          },
          {
            "timestamp": "2026-04-25 06:59:02,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14704
          },
          {
            "timestamp": "2026-04-25 06:59:02,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14705
          },
          {
            "timestamp": "2026-04-25 06:59:02,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14706
          },
          {
            "timestamp": "2026-04-25 06:59:02,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14707
          },
          {
            "timestamp": "2026-04-25 06:59:02,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14708
          },
          {
            "timestamp": "2026-04-25 06:59:02,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14709
          },
          {
            "timestamp": "2026-04-25 06:59:02,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14710
          },
          {
            "timestamp": "2026-04-25 06:59:02,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14711
          },
          {
            "timestamp": "2026-04-25 06:59:02,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14712
          },
          {
            "timestamp": "2026-04-25 06:59:02,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14713
          },
          {
            "timestamp": "2026-04-25 06:59:02,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14714
          },
          {
            "timestamp": "2026-04-25 06:59:02,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14715
          },
          {
            "timestamp": "2026-04-25 06:59:02,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14716
          },
          {
            "timestamp": "2026-04-25 06:59:02,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14717
          },
          {
            "timestamp": "2026-04-25 06:59:02,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14718
          },
          {
            "timestamp": "2026-04-25 06:59:02,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14719
          },
          {
            "timestamp": "2026-04-25 06:59:02,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14720
          },
          {
            "timestamp": "2026-04-25 06:59:02,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14721
          },
          {
            "timestamp": "2026-04-25 06:59:02,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14722
          },
          {
            "timestamp": "2026-04-25 06:59:03,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14723
          },
          {
            "timestamp": "2026-04-25 06:59:03,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14724
          },
          {
            "timestamp": "2026-04-25 06:59:03,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14725
          },
          {
            "timestamp": "2026-04-25 06:59:03,032",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14726
          },
          {
            "timestamp": "2026-04-25 06:59:03,032",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14727
          },
          {
            "timestamp": "2026-04-25 06:59:03,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14728
          },
          {
            "timestamp": "2026-04-25 06:59:03,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14729
          },
          {
            "timestamp": "2026-04-25 06:59:03,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14730
          },
          {
            "timestamp": "2026-04-25 06:59:03,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14731
          },
          {
            "timestamp": "2026-04-25 06:59:03,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14732
          },
          {
            "timestamp": "2026-04-25 06:59:03,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14733
          },
          {
            "timestamp": "2026-04-25 06:59:03,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14734
          },
          {
            "timestamp": "2026-04-25 06:59:03,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14735
          },
          {
            "timestamp": "2026-04-25 06:59:03,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14736
          },
          {
            "timestamp": "2026-04-25 06:59:03,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14737
          },
          {
            "timestamp": "2026-04-25 06:59:03,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14738
          },
          {
            "timestamp": "2026-04-25 06:59:03,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14739
          },
          {
            "timestamp": "2026-04-25 06:59:03,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14740
          },
          {
            "timestamp": "2026-04-25 06:59:03,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14741
          },
          {
            "timestamp": "2026-04-25 06:59:03,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14742
          },
          {
            "timestamp": "2026-04-25 06:59:03,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14743
          },
          {
            "timestamp": "2026-04-25 06:59:03,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14744
          },
          {
            "timestamp": "2026-04-25 06:59:03,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14745
          },
          {
            "timestamp": "2026-04-25 06:59:03,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14746
          },
          {
            "timestamp": "2026-04-25 06:59:03,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14747
          },
          {
            "timestamp": "2026-04-25 06:59:03,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14748
          },
          {
            "timestamp": "2026-04-25 06:59:03,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14749
          },
          {
            "timestamp": "2026-04-25 06:59:03,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14750
          },
          {
            "timestamp": "2026-04-25 06:59:03,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14751
          },
          {
            "timestamp": "2026-04-25 06:59:03,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14752
          },
          {
            "timestamp": "2026-04-25 06:59:03,547",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14753
          },
          {
            "timestamp": "2026-04-25 06:59:03,547",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14754
          },
          {
            "timestamp": "2026-04-25 06:59:03,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14755
          },
          {
            "timestamp": "2026-04-25 06:59:03,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14756
          },
          {
            "timestamp": "2026-04-25 06:59:03,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14757
          },
          {
            "timestamp": "2026-04-25 06:59:03,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14758
          },
          {
            "timestamp": "2026-04-25 06:59:03,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14759
          },
          {
            "timestamp": "2026-04-25 06:59:03,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14760
          },
          {
            "timestamp": "2026-04-25 06:59:03,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14761
          },
          {
            "timestamp": "2026-04-25 06:59:03,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14762
          },
          {
            "timestamp": "2026-04-25 06:59:03,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14763
          },
          {
            "timestamp": "2026-04-25 06:59:03,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14764
          },
          {
            "timestamp": "2026-04-25 06:59:03,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14765
          },
          {
            "timestamp": "2026-04-25 06:59:03,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14766
          },
          {
            "timestamp": "2026-04-25 06:59:03,844",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14767
          },
          {
            "timestamp": "2026-04-25 06:59:03,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14768
          },
          {
            "timestamp": "2026-04-25 06:59:03,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14769
          },
          {
            "timestamp": "2026-04-25 06:59:03,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14770
          },
          {
            "timestamp": "2026-04-25 06:59:03,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14771
          },
          {
            "timestamp": "2026-04-25 06:59:03,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14772
          },
          {
            "timestamp": "2026-04-25 06:59:03,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14773
          },
          {
            "timestamp": "2026-04-25 06:59:03,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14774
          },
          {
            "timestamp": "2026-04-25 06:59:03,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14775
          },
          {
            "timestamp": "2026-04-25 06:59:04,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14776
          },
          {
            "timestamp": "2026-04-25 06:59:04,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14777
          },
          {
            "timestamp": "2026-04-25 06:59:04,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14778
          },
          {
            "timestamp": "2026-04-25 06:59:04,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14779
          },
          {
            "timestamp": "2026-04-25 06:59:04,063",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14780
          },
          {
            "timestamp": "2026-04-25 06:59:04,063",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14781
          },
          {
            "timestamp": "2026-04-25 06:59:04,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14782
          },
          {
            "timestamp": "2026-04-25 06:59:04,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14783
          },
          {
            "timestamp": "2026-04-25 06:59:04,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14784
          },
          {
            "timestamp": "2026-04-25 06:59:04,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14785
          },
          {
            "timestamp": "2026-04-25 06:59:04,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14786
          },
          {
            "timestamp": "2026-04-25 06:59:04,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14787
          },
          {
            "timestamp": "2026-04-25 06:59:04,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14788
          },
          {
            "timestamp": "2026-04-25 06:59:04,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14789
          },
          {
            "timestamp": "2026-04-25 06:59:04,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14790
          },
          {
            "timestamp": "2026-04-25 06:59:04,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14791
          },
          {
            "timestamp": "2026-04-25 06:59:04,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14792
          },
          {
            "timestamp": "2026-04-25 06:59:04,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14793
          },
          {
            "timestamp": "2026-04-25 06:59:04,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14794
          },
          {
            "timestamp": "2026-04-25 06:59:04,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14795
          },
          {
            "timestamp": "2026-04-25 06:59:04,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14796
          },
          {
            "timestamp": "2026-04-25 06:59:04,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14797
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0682b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 14798
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14799
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14800
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "1416",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "bbc.in.net"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14801
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "1416",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000608",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1544"
              }
            ],
            "repeated": 0,
            "id": 14802
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "1416",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1544"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 14803
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "1416",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1544"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 14804
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 14805
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14806
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14807
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "1416",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000608"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 14808
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "1416",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1544"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.147.249"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 14809
          },
          {
            "timestamp": "2026-04-25 06:59:04,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14810
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1544"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 14811
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x772765db",
            "parentcaller": "0x738e7ec0",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x0000060c"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xd0u\\x00T\\x19\\x00\\x00P\\x17\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "5968"
              }
            ],
            "repeated": 0,
            "id": 14812
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 14813
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 14814
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14815
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 14816
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1544"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 14817
          },
          {
            "timestamp": "2026-04-25 06:59:04,376",
            "thread_id": "5968",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1544"
              }
            ],
            "repeated": 0,
            "id": 14818
          },
          {
            "timestamp": "2026-04-25 06:59:04,391",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14819
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 14820
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14821
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14822
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "5968",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1544"
              }
            ],
            "repeated": 0,
            "id": 14823
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "5968",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 14824
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "5968",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 14825
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 14826
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 14827
          },
          {
            "timestamp": "2026-04-25 06:59:04,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14828
          },
          {
            "timestamp": "2026-04-25 06:59:04,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14829
          },
          {
            "timestamp": "2026-04-25 06:59:04,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14830
          },
          {
            "timestamp": "2026-04-25 06:59:04,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14831
          },
          {
            "timestamp": "2026-04-25 06:59:04,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14832
          },
          {
            "timestamp": "2026-04-25 06:59:04,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14833
          },
          {
            "timestamp": "2026-04-25 06:59:04,579",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14834
          },
          {
            "timestamp": "2026-04-25 06:59:04,579",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14835
          },
          {
            "timestamp": "2026-04-25 06:59:04,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14836
          },
          {
            "timestamp": "2026-04-25 06:59:04,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14837
          },
          {
            "timestamp": "2026-04-25 06:59:04,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14838
          },
          {
            "timestamp": "2026-04-25 06:59:04,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14839
          },
          {
            "timestamp": "2026-04-25 06:59:04,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14840
          },
          {
            "timestamp": "2026-04-25 06:59:04,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14841
          },
          {
            "timestamp": "2026-04-25 06:59:04,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14842
          },
          {
            "timestamp": "2026-04-25 06:59:04,719",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14843
          },
          {
            "timestamp": "2026-04-25 06:59:04,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14844
          },
          {
            "timestamp": "2026-04-25 06:59:04,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14845
          },
          {
            "timestamp": "2026-04-25 06:59:04,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14846
          },
          {
            "timestamp": "2026-04-25 06:59:04,782",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14847
          },
          {
            "timestamp": "2026-04-25 06:59:04,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14848
          },
          {
            "timestamp": "2026-04-25 06:59:04,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14849
          },
          {
            "timestamp": "2026-04-25 06:59:04,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14850
          },
          {
            "timestamp": "2026-04-25 06:59:04,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14851
          },
          {
            "timestamp": "2026-04-25 06:59:04,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14852
          },
          {
            "timestamp": "2026-04-25 06:59:04,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14853
          },
          {
            "timestamp": "2026-04-25 06:59:04,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14854
          },
          {
            "timestamp": "2026-04-25 06:59:04,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14855
          },
          {
            "timestamp": "2026-04-25 06:59:04,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14856
          },
          {
            "timestamp": "2026-04-25 06:59:04,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14857
          },
          {
            "timestamp": "2026-04-25 06:59:05,032",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14858
          },
          {
            "timestamp": "2026-04-25 06:59:05,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14859
          },
          {
            "timestamp": "2026-04-25 06:59:05,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14860
          },
          {
            "timestamp": "2026-04-25 06:59:05,094",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14861
          },
          {
            "timestamp": "2026-04-25 06:59:05,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14862
          },
          {
            "timestamp": "2026-04-25 06:59:05,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14863
          },
          {
            "timestamp": "2026-04-25 06:59:05,094",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14864
          },
          {
            "timestamp": "2026-04-25 06:59:05,094",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14865
          },
          {
            "timestamp": "2026-04-25 06:59:05,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14866
          },
          {
            "timestamp": "2026-04-25 06:59:05,157",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14867
          },
          {
            "timestamp": "2026-04-25 06:59:05,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14868
          },
          {
            "timestamp": "2026-04-25 06:59:05,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14869
          },
          {
            "timestamp": "2026-04-25 06:59:05,219",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14870
          },
          {
            "timestamp": "2026-04-25 06:59:05,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14871
          },
          {
            "timestamp": "2026-04-25 06:59:05,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14872
          },
          {
            "timestamp": "2026-04-25 06:59:05,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14873
          },
          {
            "timestamp": "2026-04-25 06:59:05,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14874
          },
          {
            "timestamp": "2026-04-25 06:59:05,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14875
          },
          {
            "timestamp": "2026-04-25 06:59:05,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14876
          },
          {
            "timestamp": "2026-04-25 06:59:05,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14877
          },
          {
            "timestamp": "2026-04-25 06:59:05,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14878
          },
          {
            "timestamp": "2026-04-25 06:59:05,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14879
          },
          {
            "timestamp": "2026-04-25 06:59:05,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14880
          },
          {
            "timestamp": "2026-04-25 06:59:05,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14881
          },
          {
            "timestamp": "2026-04-25 06:59:05,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14882
          },
          {
            "timestamp": "2026-04-25 06:59:05,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14883
          },
          {
            "timestamp": "2026-04-25 06:59:05,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14884
          },
          {
            "timestamp": "2026-04-25 06:59:05,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14885
          },
          {
            "timestamp": "2026-04-25 06:59:05,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14886
          },
          {
            "timestamp": "2026-04-25 06:59:05,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14887
          },
          {
            "timestamp": "2026-04-25 06:59:05,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14888
          },
          {
            "timestamp": "2026-04-25 06:59:05,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14889
          },
          {
            "timestamp": "2026-04-25 06:59:05,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14890
          },
          {
            "timestamp": "2026-04-25 06:59:05,610",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14891
          },
          {
            "timestamp": "2026-04-25 06:59:05,610",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14892
          },
          {
            "timestamp": "2026-04-25 06:59:05,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14893
          },
          {
            "timestamp": "2026-04-25 06:59:05,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14894
          },
          {
            "timestamp": "2026-04-25 06:59:05,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14895
          },
          {
            "timestamp": "2026-04-25 06:59:05,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14896
          },
          {
            "timestamp": "2026-04-25 06:59:05,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14897
          },
          {
            "timestamp": "2026-04-25 06:59:05,719",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14898
          },
          {
            "timestamp": "2026-04-25 06:59:05,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14899
          },
          {
            "timestamp": "2026-04-25 06:59:05,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14900
          },
          {
            "timestamp": "2026-04-25 06:59:05,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14901
          },
          {
            "timestamp": "2026-04-25 06:59:05,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14902
          },
          {
            "timestamp": "2026-04-25 06:59:05,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14903
          },
          {
            "timestamp": "2026-04-25 06:59:05,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14904
          },
          {
            "timestamp": "2026-04-25 06:59:05,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14905
          },
          {
            "timestamp": "2026-04-25 06:59:05,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14906
          },
          {
            "timestamp": "2026-04-25 06:59:05,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14907
          },
          {
            "timestamp": "2026-04-25 06:59:05,969",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14908
          },
          {
            "timestamp": "2026-04-25 06:59:05,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14909
          },
          {
            "timestamp": "2026-04-25 06:59:05,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14910
          },
          {
            "timestamp": "2026-04-25 06:59:05,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14911
          },
          {
            "timestamp": "2026-04-25 06:59:06,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14912
          },
          {
            "timestamp": "2026-04-25 06:59:06,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14913
          },
          {
            "timestamp": "2026-04-25 06:59:06,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14914
          },
          {
            "timestamp": "2026-04-25 06:59:06,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14915
          },
          {
            "timestamp": "2026-04-25 06:59:06,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14916
          },
          {
            "timestamp": "2026-04-25 06:59:06,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14917
          },
          {
            "timestamp": "2026-04-25 06:59:06,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14918
          },
          {
            "timestamp": "2026-04-25 06:59:06,126",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14919
          },
          {
            "timestamp": "2026-04-25 06:59:06,126",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14920
          },
          {
            "timestamp": "2026-04-25 06:59:06,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14921
          },
          {
            "timestamp": "2026-04-25 06:59:06,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14922
          },
          {
            "timestamp": "2026-04-25 06:59:06,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14923
          },
          {
            "timestamp": "2026-04-25 06:59:06,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14924
          },
          {
            "timestamp": "2026-04-25 06:59:06,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14925
          },
          {
            "timestamp": "2026-04-25 06:59:06,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14926
          },
          {
            "timestamp": "2026-04-25 06:59:06,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14927
          },
          {
            "timestamp": "2026-04-25 06:59:06,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14928
          },
          {
            "timestamp": "2026-04-25 06:59:06,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14929
          },
          {
            "timestamp": "2026-04-25 06:59:06,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14930
          },
          {
            "timestamp": "2026-04-25 06:59:06,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14931
          },
          {
            "timestamp": "2026-04-25 06:59:06,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14932
          },
          {
            "timestamp": "2026-04-25 06:59:06,344",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14933
          },
          {
            "timestamp": "2026-04-25 06:59:06,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14934
          },
          {
            "timestamp": "2026-04-25 06:59:06,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14935
          },
          {
            "timestamp": "2026-04-25 06:59:06,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14936
          },
          {
            "timestamp": "2026-04-25 06:59:06,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14937
          },
          {
            "timestamp": "2026-04-25 06:59:06,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14938
          },
          {
            "timestamp": "2026-04-25 06:59:06,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14939
          },
          {
            "timestamp": "2026-04-25 06:59:06,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14940
          },
          {
            "timestamp": "2026-04-25 06:59:06,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14941
          },
          {
            "timestamp": "2026-04-25 06:59:06,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14942
          },
          {
            "timestamp": "2026-04-25 06:59:06,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14943
          },
          {
            "timestamp": "2026-04-25 06:59:06,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14944
          },
          {
            "timestamp": "2026-04-25 06:59:06,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14945
          },
          {
            "timestamp": "2026-04-25 06:59:06,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14946
          },
          {
            "timestamp": "2026-04-25 06:59:06,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14947
          },
          {
            "timestamp": "2026-04-25 06:59:06,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14948
          },
          {
            "timestamp": "2026-04-25 06:59:06,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14949
          },
          {
            "timestamp": "2026-04-25 06:59:06,641",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14950
          },
          {
            "timestamp": "2026-04-25 06:59:06,641",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14951
          },
          {
            "timestamp": "2026-04-25 06:59:06,657",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14952
          },
          {
            "timestamp": "2026-04-25 06:59:06,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14953
          },
          {
            "timestamp": "2026-04-25 06:59:06,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14954
          },
          {
            "timestamp": "2026-04-25 06:59:06,657",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14955
          },
          {
            "timestamp": "2026-04-25 06:59:06,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14956
          },
          {
            "timestamp": "2026-04-25 06:59:06,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14957
          },
          {
            "timestamp": "2026-04-25 06:59:06,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14958
          },
          {
            "timestamp": "2026-04-25 06:59:06,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14959
          },
          {
            "timestamp": "2026-04-25 06:59:06,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14960
          },
          {
            "timestamp": "2026-04-25 06:59:06,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14961
          },
          {
            "timestamp": "2026-04-25 06:59:06,782",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14962
          },
          {
            "timestamp": "2026-04-25 06:59:06,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14963
          },
          {
            "timestamp": "2026-04-25 06:59:06,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14964
          },
          {
            "timestamp": "2026-04-25 06:59:06,844",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14965
          },
          {
            "timestamp": "2026-04-25 06:59:06,907",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14966
          },
          {
            "timestamp": "2026-04-25 06:59:06,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14967
          },
          {
            "timestamp": "2026-04-25 06:59:06,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14968
          },
          {
            "timestamp": "2026-04-25 06:59:06,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14969
          },
          {
            "timestamp": "2026-04-25 06:59:06,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14970
          },
          {
            "timestamp": "2026-04-25 06:59:07,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14971
          },
          {
            "timestamp": "2026-04-25 06:59:07,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14972
          },
          {
            "timestamp": "2026-04-25 06:59:07,032",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14973
          },
          {
            "timestamp": "2026-04-25 06:59:07,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14974
          },
          {
            "timestamp": "2026-04-25 06:59:07,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14975
          },
          {
            "timestamp": "2026-04-25 06:59:07,094",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14976
          },
          {
            "timestamp": "2026-04-25 06:59:07,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14977
          },
          {
            "timestamp": "2026-04-25 06:59:07,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14978
          },
          {
            "timestamp": "2026-04-25 06:59:07,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14979
          },
          {
            "timestamp": "2026-04-25 06:59:07,157",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14980
          },
          {
            "timestamp": "2026-04-25 06:59:07,157",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 14981
          },
          {
            "timestamp": "2026-04-25 06:59:07,157",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 14982
          },
          {
            "timestamp": "2026-04-25 06:59:07,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14983
          },
          {
            "timestamp": "2026-04-25 06:59:07,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14984
          },
          {
            "timestamp": "2026-04-25 06:59:07,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14985
          },
          {
            "timestamp": "2026-04-25 06:59:07,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 14986
          },
          {
            "timestamp": "2026-04-25 06:59:07,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14987
          },
          {
            "timestamp": "2026-04-25 06:59:07,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14988
          },
          {
            "timestamp": "2026-04-25 06:59:07,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14989
          },
          {
            "timestamp": "2026-04-25 06:59:07,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14990
          },
          {
            "timestamp": "2026-04-25 06:59:07,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14991
          },
          {
            "timestamp": "2026-04-25 06:59:07,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14992
          },
          {
            "timestamp": "2026-04-25 06:59:07,407",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14993
          },
          {
            "timestamp": "2026-04-25 06:59:07,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14994
          },
          {
            "timestamp": "2026-04-25 06:59:07,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14995
          },
          {
            "timestamp": "2026-04-25 06:59:07,407",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 14996
          },
          {
            "timestamp": "2026-04-25 06:59:07,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 14997
          },
          {
            "timestamp": "2026-04-25 06:59:07,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 14998
          },
          {
            "timestamp": "2026-04-25 06:59:07,469",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 14999
          },
          {
            "timestamp": "2026-04-25 06:59:07,532",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15000
          },
          {
            "timestamp": "2026-04-25 06:59:07,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15001
          },
          {
            "timestamp": "2026-04-25 06:59:07,532",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15002
          },
          {
            "timestamp": "2026-04-25 06:59:07,594",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15003
          },
          {
            "timestamp": "2026-04-25 06:59:07,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15004
          },
          {
            "timestamp": "2026-04-25 06:59:07,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15005
          },
          {
            "timestamp": "2026-04-25 06:59:07,594",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15006
          },
          {
            "timestamp": "2026-04-25 06:59:07,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15007
          },
          {
            "timestamp": "2026-04-25 06:59:07,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15008
          },
          {
            "timestamp": "2026-04-25 06:59:07,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15009
          },
          {
            "timestamp": "2026-04-25 06:59:07,672",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15010
          },
          {
            "timestamp": "2026-04-25 06:59:07,672",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15011
          },
          {
            "timestamp": "2026-04-25 06:59:07,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15012
          },
          {
            "timestamp": "2026-04-25 06:59:07,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15013
          },
          {
            "timestamp": "2026-04-25 06:59:07,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15014
          },
          {
            "timestamp": "2026-04-25 06:59:07,782",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15015
          },
          {
            "timestamp": "2026-04-25 06:59:07,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15016
          },
          {
            "timestamp": "2026-04-25 06:59:07,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15017
          },
          {
            "timestamp": "2026-04-25 06:59:07,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15018
          },
          {
            "timestamp": "2026-04-25 06:59:07,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15019
          },
          {
            "timestamp": "2026-04-25 06:59:07,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15020
          },
          {
            "timestamp": "2026-04-25 06:59:07,907",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15021
          },
          {
            "timestamp": "2026-04-25 06:59:07,907",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15022
          },
          {
            "timestamp": "2026-04-25 06:59:07,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15023
          },
          {
            "timestamp": "2026-04-25 06:59:07,907",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15024
          },
          {
            "timestamp": "2026-04-25 06:59:07,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15025
          },
          {
            "timestamp": "2026-04-25 06:59:07,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15026
          },
          {
            "timestamp": "2026-04-25 06:59:07,969",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15027
          },
          {
            "timestamp": "2026-04-25 06:59:08,032",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15028
          },
          {
            "timestamp": "2026-04-25 06:59:08,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15029
          },
          {
            "timestamp": "2026-04-25 06:59:08,032",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15030
          },
          {
            "timestamp": "2026-04-25 06:59:08,094",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15031
          },
          {
            "timestamp": "2026-04-25 06:59:08,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15032
          },
          {
            "timestamp": "2026-04-25 06:59:08,094",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15033
          },
          {
            "timestamp": "2026-04-25 06:59:08,157",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15034
          },
          {
            "timestamp": "2026-04-25 06:59:08,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15035
          },
          {
            "timestamp": "2026-04-25 06:59:08,157",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15036
          },
          {
            "timestamp": "2026-04-25 06:59:08,188",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15037
          },
          {
            "timestamp": "2026-04-25 06:59:08,188",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15038
          },
          {
            "timestamp": "2026-04-25 06:59:08,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15039
          },
          {
            "timestamp": "2026-04-25 06:59:08,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15040
          },
          {
            "timestamp": "2026-04-25 06:59:08,219",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15041
          },
          {
            "timestamp": "2026-04-25 06:59:08,282",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15042
          },
          {
            "timestamp": "2026-04-25 06:59:08,282",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15043
          },
          {
            "timestamp": "2026-04-25 06:59:08,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15044
          },
          {
            "timestamp": "2026-04-25 06:59:08,344",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15045
          },
          {
            "timestamp": "2026-04-25 06:59:08,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15046
          },
          {
            "timestamp": "2026-04-25 06:59:08,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15047
          },
          {
            "timestamp": "2026-04-25 06:59:08,407",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15048
          },
          {
            "timestamp": "2026-04-25 06:59:08,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15049
          },
          {
            "timestamp": "2026-04-25 06:59:08,407",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15050
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6948",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x0684b000"
              },
              {
                "name": "RegionSize",
                "value": "0x00020000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 15051
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15052
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15053
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6328",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 15054
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6328",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x00000708",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1800"
              }
            ],
            "repeated": 0,
            "id": 15055
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6328",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1800"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 15056
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6328",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1800"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 15057
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "1416",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 15058
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15059
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15060
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6328",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x00000708"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 15061
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6328",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1800"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 15062
          },
          {
            "timestamp": "2026-04-25 06:59:08,422",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15063
          },
          {
            "timestamp": "2026-04-25 06:59:08,438",
            "thread_id": "5968",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1800"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 15064
          },
          {
            "timestamp": "2026-04-25 06:59:08,438",
            "thread_id": "5968",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 15065
          },
          {
            "timestamp": "2026-04-25 06:59:08,438",
            "thread_id": "5968",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 15066
          },
          {
            "timestamp": "2026-04-25 06:59:08,438",
            "thread_id": "5968",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 15067
          },
          {
            "timestamp": "2026-04-25 06:59:08,438",
            "thread_id": "5968",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 15068
          },
          {
            "timestamp": "2026-04-25 06:59:08,438",
            "thread_id": "5968",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1800"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 15069
          },
          {
            "timestamp": "2026-04-25 06:59:08,438",
            "thread_id": "5968",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1800"
              }
            ],
            "repeated": 0,
            "id": 15070
          },
          {
            "timestamp": "2026-04-25 06:59:08,454",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15071
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15072
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15073
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15074
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "5968",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1800"
              }
            ],
            "repeated": 0,
            "id": 15075
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "5968",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 15076
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "5968",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 15077
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "6328",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 15078
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 1,
            "id": 15079
          },
          {
            "timestamp": "2026-04-25 06:59:08,469",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15080
          },
          {
            "timestamp": "2026-04-25 06:59:08,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15081
          },
          {
            "timestamp": "2026-04-25 06:59:08,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15082
          },
          {
            "timestamp": "2026-04-25 06:59:08,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15083
          },
          {
            "timestamp": "2026-04-25 06:59:08,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15084
          },
          {
            "timestamp": "2026-04-25 06:59:08,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15085
          },
          {
            "timestamp": "2026-04-25 06:59:08,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15086
          },
          {
            "timestamp": "2026-04-25 06:59:08,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15087
          },
          {
            "timestamp": "2026-04-25 06:59:08,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15088
          },
          {
            "timestamp": "2026-04-25 06:59:08,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15089
          },
          {
            "timestamp": "2026-04-25 06:59:08,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15090
          },
          {
            "timestamp": "2026-04-25 06:59:08,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15091
          },
          {
            "timestamp": "2026-04-25 06:59:08,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15092
          },
          {
            "timestamp": "2026-04-25 06:59:08,704",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15093
          },
          {
            "timestamp": "2026-04-25 06:59:08,704",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15094
          },
          {
            "timestamp": "2026-04-25 06:59:08,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15095
          },
          {
            "timestamp": "2026-04-25 06:59:08,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15096
          },
          {
            "timestamp": "2026-04-25 06:59:08,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15097
          },
          {
            "timestamp": "2026-04-25 06:59:08,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15098
          },
          {
            "timestamp": "2026-04-25 06:59:08,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15099
          },
          {
            "timestamp": "2026-04-25 06:59:08,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15100
          },
          {
            "timestamp": "2026-04-25 06:59:08,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15101
          },
          {
            "timestamp": "2026-04-25 06:59:08,844",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15102
          },
          {
            "timestamp": "2026-04-25 06:59:08,844",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15103
          },
          {
            "timestamp": "2026-04-25 06:59:08,844",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15104
          },
          {
            "timestamp": "2026-04-25 06:59:08,844",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15105
          },
          {
            "timestamp": "2026-04-25 06:59:08,907",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15106
          },
          {
            "timestamp": "2026-04-25 06:59:08,907",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15107
          },
          {
            "timestamp": "2026-04-25 06:59:08,907",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15108
          },
          {
            "timestamp": "2026-04-25 06:59:08,969",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15109
          },
          {
            "timestamp": "2026-04-25 06:59:08,969",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15110
          },
          {
            "timestamp": "2026-04-25 06:59:08,969",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15111
          },
          {
            "timestamp": "2026-04-25 06:59:08,969",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15112
          },
          {
            "timestamp": "2026-04-25 06:59:09,032",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15113
          },
          {
            "timestamp": "2026-04-25 06:59:09,032",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15114
          },
          {
            "timestamp": "2026-04-25 06:59:09,032",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15115
          },
          {
            "timestamp": "2026-04-25 06:59:09,094",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15116
          },
          {
            "timestamp": "2026-04-25 06:59:09,094",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15117
          },
          {
            "timestamp": "2026-04-25 06:59:09,094",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 1,
            "id": 15118
          },
          {
            "timestamp": "2026-04-25 06:59:09,157",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15119
          },
          {
            "timestamp": "2026-04-25 06:59:09,157",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15120
          },
          {
            "timestamp": "2026-04-25 06:59:09,219",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15121
          },
          {
            "timestamp": "2026-04-25 06:59:09,219",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15122
          },
          {
            "timestamp": "2026-04-25 06:59:09,219",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15123
          },
          {
            "timestamp": "2026-04-25 06:59:09,219",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15124
          },
          {
            "timestamp": "2026-04-25 06:59:09,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15125
          },
          {
            "timestamp": "2026-04-25 06:59:09,282",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15126
          },
          {
            "timestamp": "2026-04-25 06:59:09,282",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15127
          },
          {
            "timestamp": "2026-04-25 06:59:09,282",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15128
          },
          {
            "timestamp": "2026-04-25 06:59:09,282",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15129
          },
          {
            "timestamp": "2026-04-25 06:59:09,344",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15130
          },
          {
            "timestamp": "2026-04-25 06:59:09,344",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15131
          },
          {
            "timestamp": "2026-04-25 06:59:09,344",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15132
          },
          {
            "timestamp": "2026-04-25 06:59:09,344",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15133
          },
          {
            "timestamp": "2026-04-25 06:59:09,407",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15134
          },
          {
            "timestamp": "2026-04-25 06:59:09,407",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15135
          },
          {
            "timestamp": "2026-04-25 06:59:09,407",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15136
          },
          {
            "timestamp": "2026-04-25 06:59:09,469",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15137
          },
          {
            "timestamp": "2026-04-25 06:59:09,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15138
          },
          {
            "timestamp": "2026-04-25 06:59:09,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15139
          },
          {
            "timestamp": "2026-04-25 06:59:09,532",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15140
          },
          {
            "timestamp": "2026-04-25 06:59:09,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15141
          },
          {
            "timestamp": "2026-04-25 06:59:09,532",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15142
          },
          {
            "timestamp": "2026-04-25 06:59:09,532",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15143
          },
          {
            "timestamp": "2026-04-25 06:59:09,594",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15144
          },
          {
            "timestamp": "2026-04-25 06:59:09,594",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15145
          },
          {
            "timestamp": "2026-04-25 06:59:09,594",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15146
          },
          {
            "timestamp": "2026-04-25 06:59:09,594",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15147
          },
          {
            "timestamp": "2026-04-25 06:59:09,657",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15148
          },
          {
            "timestamp": "2026-04-25 06:59:09,657",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15149
          },
          {
            "timestamp": "2026-04-25 06:59:09,657",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15150
          },
          {
            "timestamp": "2026-04-25 06:59:09,657",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15151
          },
          {
            "timestamp": "2026-04-25 06:59:09,719",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15152
          },
          {
            "timestamp": "2026-04-25 06:59:09,719",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15153
          },
          {
            "timestamp": "2026-04-25 06:59:09,719",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15154
          },
          {
            "timestamp": "2026-04-25 06:59:09,719",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15155
          },
          {
            "timestamp": "2026-04-25 06:59:09,735",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15156
          },
          {
            "timestamp": "2026-04-25 06:59:09,735",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15157
          },
          {
            "timestamp": "2026-04-25 06:59:09,782",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15158
          },
          {
            "timestamp": "2026-04-25 06:59:09,782",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15159
          },
          {
            "timestamp": "2026-04-25 06:59:09,782",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15160
          },
          {
            "timestamp": "2026-04-25 06:59:09,782",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15161
          },
          {
            "timestamp": "2026-04-25 06:59:09,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15162
          },
          {
            "timestamp": "2026-04-25 06:59:09,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15163
          },
          {
            "timestamp": "2026-04-25 06:59:09,876",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15164
          },
          {
            "timestamp": "2026-04-25 06:59:09,954",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15165
          },
          {
            "timestamp": "2026-04-25 06:59:09,954",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15166
          },
          {
            "timestamp": "2026-04-25 06:59:09,954",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15167
          },
          {
            "timestamp": "2026-04-25 06:59:10,016",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15168
          },
          {
            "timestamp": "2026-04-25 06:59:10,016",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15169
          },
          {
            "timestamp": "2026-04-25 06:59:10,016",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15170
          },
          {
            "timestamp": "2026-04-25 06:59:10,079",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15171
          },
          {
            "timestamp": "2026-04-25 06:59:10,079",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15172
          },
          {
            "timestamp": "2026-04-25 06:59:10,079",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15173
          },
          {
            "timestamp": "2026-04-25 06:59:10,141",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15174
          },
          {
            "timestamp": "2026-04-25 06:59:10,141",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15175
          },
          {
            "timestamp": "2026-04-25 06:59:10,141",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15176
          },
          {
            "timestamp": "2026-04-25 06:59:10,204",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15177
          },
          {
            "timestamp": "2026-04-25 06:59:10,204",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15178
          },
          {
            "timestamp": "2026-04-25 06:59:10,204",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15179
          },
          {
            "timestamp": "2026-04-25 06:59:10,219",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15180
          },
          {
            "timestamp": "2026-04-25 06:59:10,251",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15181
          },
          {
            "timestamp": "2026-04-25 06:59:10,251",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15182
          },
          {
            "timestamp": "2026-04-25 06:59:10,266",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15183
          },
          {
            "timestamp": "2026-04-25 06:59:10,266",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15184
          },
          {
            "timestamp": "2026-04-25 06:59:10,266",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15185
          },
          {
            "timestamp": "2026-04-25 06:59:10,266",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15186
          },
          {
            "timestamp": "2026-04-25 06:59:10,329",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15187
          },
          {
            "timestamp": "2026-04-25 06:59:10,329",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15188
          },
          {
            "timestamp": "2026-04-25 06:59:10,329",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15189
          },
          {
            "timestamp": "2026-04-25 06:59:10,329",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15190
          },
          {
            "timestamp": "2026-04-25 06:59:10,391",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15191
          },
          {
            "timestamp": "2026-04-25 06:59:10,391",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15192
          },
          {
            "timestamp": "2026-04-25 06:59:10,391",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15193
          },
          {
            "timestamp": "2026-04-25 06:59:10,469",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15194
          },
          {
            "timestamp": "2026-04-25 06:59:10,469",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15195
          },
          {
            "timestamp": "2026-04-25 06:59:10,469",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15196
          },
          {
            "timestamp": "2026-04-25 06:59:10,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15197
          },
          {
            "timestamp": "2026-04-25 06:59:10,547",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15198
          },
          {
            "timestamp": "2026-04-25 06:59:10,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15199
          },
          {
            "timestamp": "2026-04-25 06:59:10,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15200
          },
          {
            "timestamp": "2026-04-25 06:59:10,563",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15201
          },
          {
            "timestamp": "2026-04-25 06:59:10,610",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15202
          },
          {
            "timestamp": "2026-04-25 06:59:10,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15203
          },
          {
            "timestamp": "2026-04-25 06:59:10,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15204
          },
          {
            "timestamp": "2026-04-25 06:59:10,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15205
          },
          {
            "timestamp": "2026-04-25 06:59:10,672",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15206
          },
          {
            "timestamp": "2026-04-25 06:59:10,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15207
          },
          {
            "timestamp": "2026-04-25 06:59:10,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15208
          },
          {
            "timestamp": "2026-04-25 06:59:10,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15209
          },
          {
            "timestamp": "2026-04-25 06:59:10,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15210
          },
          {
            "timestamp": "2026-04-25 06:59:10,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15211
          },
          {
            "timestamp": "2026-04-25 06:59:10,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15212
          },
          {
            "timestamp": "2026-04-25 06:59:10,766",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15213
          },
          {
            "timestamp": "2026-04-25 06:59:10,766",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15214
          },
          {
            "timestamp": "2026-04-25 06:59:10,797",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15215
          },
          {
            "timestamp": "2026-04-25 06:59:10,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15216
          },
          {
            "timestamp": "2026-04-25 06:59:10,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15217
          },
          {
            "timestamp": "2026-04-25 06:59:10,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15218
          },
          {
            "timestamp": "2026-04-25 06:59:10,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15219
          },
          {
            "timestamp": "2026-04-25 06:59:10,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15220
          },
          {
            "timestamp": "2026-04-25 06:59:10,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15221
          },
          {
            "timestamp": "2026-04-25 06:59:10,922",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15222
          },
          {
            "timestamp": "2026-04-25 06:59:10,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15223
          },
          {
            "timestamp": "2026-04-25 06:59:10,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15224
          },
          {
            "timestamp": "2026-04-25 06:59:10,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15225
          },
          {
            "timestamp": "2026-04-25 06:59:10,985",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15226
          },
          {
            "timestamp": "2026-04-25 06:59:10,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15227
          },
          {
            "timestamp": "2026-04-25 06:59:10,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15228
          },
          {
            "timestamp": "2026-04-25 06:59:10,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15229
          },
          {
            "timestamp": "2026-04-25 06:59:11,047",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15230
          },
          {
            "timestamp": "2026-04-25 06:59:11,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15231
          },
          {
            "timestamp": "2026-04-25 06:59:11,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15232
          },
          {
            "timestamp": "2026-04-25 06:59:11,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15233
          },
          {
            "timestamp": "2026-04-25 06:59:11,110",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15234
          },
          {
            "timestamp": "2026-04-25 06:59:11,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15235
          },
          {
            "timestamp": "2026-04-25 06:59:11,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15236
          },
          {
            "timestamp": "2026-04-25 06:59:11,172",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15237
          },
          {
            "timestamp": "2026-04-25 06:59:11,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15238
          },
          {
            "timestamp": "2026-04-25 06:59:11,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15239
          },
          {
            "timestamp": "2026-04-25 06:59:11,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15240
          },
          {
            "timestamp": "2026-04-25 06:59:11,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15241
          },
          {
            "timestamp": "2026-04-25 06:59:11,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15242
          },
          {
            "timestamp": "2026-04-25 06:59:11,282",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15243
          },
          {
            "timestamp": "2026-04-25 06:59:11,282",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15244
          },
          {
            "timestamp": "2026-04-25 06:59:11,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15245
          },
          {
            "timestamp": "2026-04-25 06:59:11,297",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15246
          },
          {
            "timestamp": "2026-04-25 06:59:11,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15247
          },
          {
            "timestamp": "2026-04-25 06:59:11,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15248
          },
          {
            "timestamp": "2026-04-25 06:59:11,360",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15249
          },
          {
            "timestamp": "2026-04-25 06:59:11,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15250
          },
          {
            "timestamp": "2026-04-25 06:59:11,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15251
          },
          {
            "timestamp": "2026-04-25 06:59:11,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15252
          },
          {
            "timestamp": "2026-04-25 06:59:11,422",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15253
          },
          {
            "timestamp": "2026-04-25 06:59:11,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15254
          },
          {
            "timestamp": "2026-04-25 06:59:11,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15255
          },
          {
            "timestamp": "2026-04-25 06:59:11,422",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15256
          },
          {
            "timestamp": "2026-04-25 06:59:11,485",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15257
          },
          {
            "timestamp": "2026-04-25 06:59:11,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15258
          },
          {
            "timestamp": "2026-04-25 06:59:11,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15259
          },
          {
            "timestamp": "2026-04-25 06:59:11,547",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15260
          },
          {
            "timestamp": "2026-04-25 06:59:11,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15261
          },
          {
            "timestamp": "2026-04-25 06:59:11,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15262
          },
          {
            "timestamp": "2026-04-25 06:59:11,547",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15263
          },
          {
            "timestamp": "2026-04-25 06:59:11,610",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15264
          },
          {
            "timestamp": "2026-04-25 06:59:11,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15265
          },
          {
            "timestamp": "2026-04-25 06:59:11,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15266
          },
          {
            "timestamp": "2026-04-25 06:59:11,610",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15267
          },
          {
            "timestamp": "2026-04-25 06:59:11,672",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15268
          },
          {
            "timestamp": "2026-04-25 06:59:11,672",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15269
          },
          {
            "timestamp": "2026-04-25 06:59:11,735",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15270
          },
          {
            "timestamp": "2026-04-25 06:59:11,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15271
          },
          {
            "timestamp": "2026-04-25 06:59:11,735",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15272
          },
          {
            "timestamp": "2026-04-25 06:59:11,797",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15273
          },
          {
            "timestamp": "2026-04-25 06:59:11,797",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15274
          },
          {
            "timestamp": "2026-04-25 06:59:11,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15275
          },
          {
            "timestamp": "2026-04-25 06:59:11,797",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15276
          },
          {
            "timestamp": "2026-04-25 06:59:11,797",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15277
          },
          {
            "timestamp": "2026-04-25 06:59:11,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15278
          },
          {
            "timestamp": "2026-04-25 06:59:11,860",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15279
          },
          {
            "timestamp": "2026-04-25 06:59:11,860",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15280
          },
          {
            "timestamp": "2026-04-25 06:59:11,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15281
          },
          {
            "timestamp": "2026-04-25 06:59:11,922",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15282
          },
          {
            "timestamp": "2026-04-25 06:59:11,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15283
          },
          {
            "timestamp": "2026-04-25 06:59:11,922",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15284
          },
          {
            "timestamp": "2026-04-25 06:59:11,985",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15285
          },
          {
            "timestamp": "2026-04-25 06:59:11,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15286
          },
          {
            "timestamp": "2026-04-25 06:59:11,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15287
          },
          {
            "timestamp": "2026-04-25 06:59:11,985",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15288
          },
          {
            "timestamp": "2026-04-25 06:59:12,047",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15289
          },
          {
            "timestamp": "2026-04-25 06:59:12,047",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15290
          },
          {
            "timestamp": "2026-04-25 06:59:12,110",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15291
          },
          {
            "timestamp": "2026-04-25 06:59:12,110",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15292
          },
          {
            "timestamp": "2026-04-25 06:59:12,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15293
          },
          {
            "timestamp": "2026-04-25 06:59:12,110",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15294
          },
          {
            "timestamp": "2026-04-25 06:59:12,172",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15295
          },
          {
            "timestamp": "2026-04-25 06:59:12,172",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15296
          },
          {
            "timestamp": "2026-04-25 06:59:12,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15297
          },
          {
            "timestamp": "2026-04-25 06:59:12,235",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15298
          },
          {
            "timestamp": "2026-04-25 06:59:12,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15299
          },
          {
            "timestamp": "2026-04-25 06:59:12,235",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15300
          },
          {
            "timestamp": "2026-04-25 06:59:12,297",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15301
          },
          {
            "timestamp": "2026-04-25 06:59:12,297",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15302
          },
          {
            "timestamp": "2026-04-25 06:59:12,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15303
          },
          {
            "timestamp": "2026-04-25 06:59:12,297",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15304
          },
          {
            "timestamp": "2026-04-25 06:59:12,313",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15305
          },
          {
            "timestamp": "2026-04-25 06:59:12,313",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15306
          },
          {
            "timestamp": "2026-04-25 06:59:12,360",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15307
          },
          {
            "timestamp": "2026-04-25 06:59:12,360",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15308
          },
          {
            "timestamp": "2026-04-25 06:59:12,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15309
          },
          {
            "timestamp": "2026-04-25 06:59:12,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15310
          },
          {
            "timestamp": "2026-04-25 06:59:12,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15311
          },
          {
            "timestamp": "2026-04-25 06:59:12,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15312
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15313
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15314
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15315
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x00000668"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00\\xb0t\\x00T\\x19\\x00\\x00\\xb8\\x18\\x00\\x00\\x03\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6328"
              }
            ],
            "repeated": 0,
            "id": 15316
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "misc",
            "api": "GlobalMemoryStatusEx",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "MemoryLoad",
                "value": "25"
              },
              {
                "name": "TotalPhysicalMB",
                "value": "8191"
              }
            ],
            "repeated": 0,
            "id": 15317
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06518000"
              },
              {
                "name": "RegionSize",
                "value": "0x00041000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 15318
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtAllocateVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06590000"
              },
              {
                "name": "RegionSize",
                "value": "0x00071000"
              },
              {
                "name": "Protection",
                "value": "0x00000004",
                "pretty_value": "PAGE_READWRITE"
              },
              {
                "name": "StackPivoted",
                "value": "no"
              }
            ],
            "repeated": 0,
            "id": 15319
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "process",
            "api": "NtFreeVirtualMemory",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ProcessHandle",
                "value": "0xffffffff"
              },
              {
                "name": "BaseAddress",
                "value": "0x06622000"
              },
              {
                "name": "RegionSize",
                "value": "0x00249000"
              },
              {
                "name": "FreeType",
                "value": "0x00004000"
              }
            ],
            "repeated": 0,
            "id": 15320
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6328",
            "caller": "0x0507eb94",
            "parentcaller": "0x0507ea87",
            "category": "misc",
            "api": "GlobalMemoryStatusEx",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "MemoryLoad",
                "value": "25"
              },
              {
                "name": "TotalPhysicalMB",
                "value": "8191"
              }
            ],
            "repeated": 0,
            "id": 15321
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000510"
              }
            ],
            "repeated": 0,
            "id": 15322
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006e8"
              }
            ],
            "repeated": 0,
            "id": 15323
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000704"
              }
            ],
            "repeated": 0,
            "id": 15324
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006c8"
              }
            ],
            "repeated": 0,
            "id": 15325
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000698"
              }
            ],
            "repeated": 0,
            "id": 15326
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000708"
              }
            ],
            "repeated": 0,
            "id": 15327
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006a0"
              }
            ],
            "repeated": 0,
            "id": 15328
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15329
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005f4"
              }
            ],
            "repeated": 0,
            "id": 15330
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000654"
              }
            ],
            "repeated": 0,
            "id": 15331
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000610"
              }
            ],
            "repeated": 0,
            "id": 15332
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000005ac"
              }
            ],
            "repeated": 0,
            "id": 15333
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x07882751",
            "parentcaller": "0x0507ee1e",
            "category": "network",
            "api": "getaddrinfo",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "NodeName",
                "value": "syashop.uk.com"
              },
              {
                "name": "ServiceName",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 15334
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000544"
              }
            ],
            "repeated": 0,
            "id": 15335
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000058c"
              }
            ],
            "repeated": 0,
            "id": 15336
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006c4"
              }
            ],
            "repeated": 0,
            "id": 15337
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000003e4"
              }
            ],
            "repeated": 0,
            "id": 15338
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000524"
              }
            ],
            "repeated": 0,
            "id": 15339
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x07881bd0",
            "parentcaller": "0x0836e100",
            "category": "network",
            "api": "WSASocketW",
            "status": true,
            "return": "0x0000070c",
            "arguments": [
              {
                "name": "af",
                "value": "2",
                "pretty_value": "AF_INET"
              },
              {
                "name": "type",
                "value": "1",
                "pretty_value": "SOCK_STREAM"
              },
              {
                "name": "protocol",
                "value": "6",
                "pretty_value": "IPPROTO_TCP"
              },
              {
                "name": "socket",
                "value": "1804"
              }
            ],
            "repeated": 0,
            "id": 15340
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x0000069c"
              }
            ],
            "repeated": 0,
            "id": 15341
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x000006d4"
              }
            ],
            "repeated": 0,
            "id": 15342
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x07880b33",
            "parentcaller": "0x0836dff8",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1804"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00000080"
              },
              {
                "name": "optval",
                "value": "\\x01\\x00\\x00\\x00"
              }
            ],
            "repeated": 0,
            "id": 15343
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x0788019e",
            "parentcaller": "0x00000000",
            "category": "system",
            "api": "NtClose",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000634"
              }
            ],
            "repeated": 0,
            "id": 15344
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "2396",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000348"
              },
              {
                "name": "Milliseconds",
                "value": "2000"
              }
            ],
            "repeated": 0,
            "id": 15345
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x078828ed",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "bind",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1804"
              },
              {
                "name": "ip",
                "value": "0.0.0.0"
              },
              {
                "name": "port",
                "value": "0"
              }
            ],
            "repeated": 0,
            "id": 15346
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 15347
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15348
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x0836e19c",
            "parentcaller": "0x0836dff8",
            "category": "filesystem",
            "api": "NtSetInformationFile",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "FileHandle",
                "value": "0x0000070c"
              },
              {
                "name": "HandleName",
                "value": "\\Device\\Afd"
              },
              {
                "name": "FileInformationClass",
                "value": "30",
                "pretty_value": "FileCompletionInformation"
              },
              {
                "name": "FileInformation",
                "value": "L\\x04\\x00\\x00\\x9a\\xda\\xa3s"
              }
            ],
            "repeated": 0,
            "id": 15349
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x0289ad6f",
            "parentcaller": "0x0836e19c",
            "category": "network",
            "api": "ConnectEx",
            "status": false,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1804"
              },
              {
                "name": "SendBuffer",
                "value": ""
              },
              {
                "name": "ip",
                "value": "172.67.178.110"
              },
              {
                "name": "port",
                "value": "443"
              }
            ],
            "repeated": 0,
            "id": 15350
          },
          {
            "timestamp": "2026-04-25 06:59:12,485",
            "thread_id": "6948",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15351
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "6328",
            "caller": "0x0836e399",
            "parentcaller": "0x0836e358",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "20"
              }
            ],
            "repeated": 0,
            "id": 15352
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "5968",
            "caller": "0x07882acb",
            "parentcaller": "0x00000000",
            "category": "network",
            "api": "setsockopt",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1804"
              },
              {
                "name": "level",
                "value": "0x0000ffff"
              },
              {
                "name": "optname",
                "value": "0x00007010"
              },
              {
                "name": "optval",
                "value": ""
              }
            ],
            "repeated": 0,
            "id": 15353
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "5968",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e834",
            "category": "misc",
            "api": "GetComputerNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "ComputerName",
                "value": "DESKTOP-PC01"
              }
            ],
            "repeated": 0,
            "id": 15354
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "5968",
            "caller": "0x0288afec",
            "parentcaller": "0x0836e847",
            "category": "misc",
            "api": "GetUserNameW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "Name",
                "value": "cape"
              }
            ],
            "repeated": 0,
            "id": 15355
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "5968",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00"
              },
              {
                "name": "Length",
                "value": "72"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 15356
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "5968",
            "caller": "0x0836f1ac",
            "parentcaller": "0x0836ea17",
            "category": "crypto",
            "api": "CryptEncrypt",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "CryptKey",
                "value": "0x00c61c78"
              },
              {
                "name": "CryptHash",
                "value": "0x00000000"
              },
              {
                "name": "Buffer",
                "value": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3"
              },
              {
                "name": "Length",
                "value": "16"
              },
              {
                "name": "Final",
                "value": "1"
              }
            ],
            "repeated": 0,
            "id": 15357
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "5968",
            "caller": "0x07882cc4",
            "parentcaller": "0x0836f4e2",
            "category": "network",
            "api": "WSASend",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Socket",
                "value": "1804"
              },
              {
                "name": "Buffer",
                "value": "@\\x00\\x00\\x00\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%"
              }
            ],
            "repeated": 0,
            "id": 15358
          },
          {
            "timestamp": "2026-04-25 06:59:12,516",
            "thread_id": "5968",
            "caller": "0x07882db8",
            "parentcaller": "0x0836f537",
            "category": "network",
            "api": "WSARecv",
            "status": false,
            "return": "0xffffffffffffffff",
            "arguments": [
              {
                "name": "socket",
                "value": "1804"
              }
            ],
            "repeated": 0,
            "id": 15359
          },
          {
            "timestamp": "2026-04-25 06:59:12,532",
            "thread_id": "5968",
            "caller": "0x0288a7be",
            "parentcaller": "0x0836f925",
            "category": "network",
            "api": "closesocket",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "socket",
                "value": "1804"
              }
            ],
            "repeated": 0,
            "id": 15360
          },
          {
            "timestamp": "2026-04-25 06:59:12,532",
            "thread_id": "5968",
            "caller": "0x0288bbbb",
            "parentcaller": "0x0507d53d",
            "category": "windows",
            "api": "PostMessageW",
            "status": true,
            "return": "0x00000001",
            "arguments": [
              {
                "name": "WindowHandle",
                "value": "0x000500f8"
              },
              {
                "name": "Message",
                "value": "0x0000c1a9"
              }
            ],
            "repeated": 0,
            "id": 15361
          },
          {
            "timestamp": "2026-04-25 06:59:12,532",
            "thread_id": "5968",
            "caller": "0x0288b109",
            "parentcaller": "0x0507d53d",
            "category": "threading",
            "api": "NtQueryInformationThread",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "ThreadHandle",
                "value": "0x000003c4"
              },
              {
                "name": "ThreadInformationClass",
                "value": "0",
                "pretty_value": "ThreadBasicInformation"
              },
              {
                "name": "ThreadInformation",
                "value": "\\x03\\x01\\x00\\x00\\x00 q\\x00T\\x19\\x00\\x00h\\x19\\x00\\x00\\x03\\x00\\x00\\x00\n\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
              },
              {
                "name": "ThreadId",
                "value": "6504"
              }
            ],
            "repeated": 0,
            "id": 15362
          },
          {
            "timestamp": "2026-04-25 06:59:12,532",
            "thread_id": "6948",
            "caller": "0x0836fe40",
            "parentcaller": "0x0836fe16",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "4000"
              }
            ],
            "repeated": 0,
            "id": 15363
          },
          {
            "timestamp": "2026-04-25 06:59:12,532",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15364
          },
          {
            "timestamp": "2026-04-25 06:59:12,532",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15365
          },
          {
            "timestamp": "2026-04-25 06:59:12,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15366
          },
          {
            "timestamp": "2026-04-25 06:59:12,547",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15367
          },
          {
            "timestamp": "2026-04-25 06:59:12,610",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15368
          },
          {
            "timestamp": "2026-04-25 06:59:12,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15369
          },
          {
            "timestamp": "2026-04-25 06:59:12,610",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15370
          },
          {
            "timestamp": "2026-04-25 06:59:12,672",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15371
          },
          {
            "timestamp": "2026-04-25 06:59:12,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15372
          },
          {
            "timestamp": "2026-04-25 06:59:12,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15373
          },
          {
            "timestamp": "2026-04-25 06:59:12,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15374
          },
          {
            "timestamp": "2026-04-25 06:59:12,735",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15375
          },
          {
            "timestamp": "2026-04-25 06:59:12,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15376
          },
          {
            "timestamp": "2026-04-25 06:59:12,735",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15377
          },
          {
            "timestamp": "2026-04-25 06:59:12,797",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15378
          },
          {
            "timestamp": "2026-04-25 06:59:12,797",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15379
          },
          {
            "timestamp": "2026-04-25 06:59:12,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15380
          },
          {
            "timestamp": "2026-04-25 06:59:12,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15381
          },
          {
            "timestamp": "2026-04-25 06:59:12,829",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15382
          },
          {
            "timestamp": "2026-04-25 06:59:12,829",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15383
          },
          {
            "timestamp": "2026-04-25 06:59:12,860",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15384
          },
          {
            "timestamp": "2026-04-25 06:59:12,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15385
          },
          {
            "timestamp": "2026-04-25 06:59:12,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15386
          },
          {
            "timestamp": "2026-04-25 06:59:12,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15387
          },
          {
            "timestamp": "2026-04-25 06:59:12,922",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15388
          },
          {
            "timestamp": "2026-04-25 06:59:12,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15389
          },
          {
            "timestamp": "2026-04-25 06:59:12,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15390
          },
          {
            "timestamp": "2026-04-25 06:59:12,985",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15391
          },
          {
            "timestamp": "2026-04-25 06:59:12,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15392
          },
          {
            "timestamp": "2026-04-25 06:59:12,985",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15393
          },
          {
            "timestamp": "2026-04-25 06:59:13,047",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15394
          },
          {
            "timestamp": "2026-04-25 06:59:13,047",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15395
          },
          {
            "timestamp": "2026-04-25 06:59:13,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15396
          },
          {
            "timestamp": "2026-04-25 06:59:13,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15397
          },
          {
            "timestamp": "2026-04-25 06:59:13,110",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15398
          },
          {
            "timestamp": "2026-04-25 06:59:13,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15399
          },
          {
            "timestamp": "2026-04-25 06:59:13,110",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15400
          },
          {
            "timestamp": "2026-04-25 06:59:13,172",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15401
          },
          {
            "timestamp": "2026-04-25 06:59:13,172",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15402
          },
          {
            "timestamp": "2026-04-25 06:59:13,172",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15403
          },
          {
            "timestamp": "2026-04-25 06:59:13,235",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15404
          },
          {
            "timestamp": "2026-04-25 06:59:13,235",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15405
          },
          {
            "timestamp": "2026-04-25 06:59:13,235",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15406
          },
          {
            "timestamp": "2026-04-25 06:59:13,297",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15407
          },
          {
            "timestamp": "2026-04-25 06:59:13,297",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15408
          },
          {
            "timestamp": "2026-04-25 06:59:13,297",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15409
          },
          {
            "timestamp": "2026-04-25 06:59:13,344",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15410
          },
          {
            "timestamp": "2026-04-25 06:59:13,344",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15411
          },
          {
            "timestamp": "2026-04-25 06:59:13,360",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15412
          },
          {
            "timestamp": "2026-04-25 06:59:13,360",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15413
          },
          {
            "timestamp": "2026-04-25 06:59:13,360",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15414
          },
          {
            "timestamp": "2026-04-25 06:59:13,360",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15415
          },
          {
            "timestamp": "2026-04-25 06:59:13,422",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15416
          },
          {
            "timestamp": "2026-04-25 06:59:13,422",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15417
          },
          {
            "timestamp": "2026-04-25 06:59:13,422",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15418
          },
          {
            "timestamp": "2026-04-25 06:59:13,485",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15419
          },
          {
            "timestamp": "2026-04-25 06:59:13,485",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15420
          },
          {
            "timestamp": "2026-04-25 06:59:13,485",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15421
          },
          {
            "timestamp": "2026-04-25 06:59:13,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15422
          },
          {
            "timestamp": "2026-04-25 06:59:13,547",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15423
          },
          {
            "timestamp": "2026-04-25 06:59:13,547",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15424
          },
          {
            "timestamp": "2026-04-25 06:59:13,547",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15425
          },
          {
            "timestamp": "2026-04-25 06:59:13,610",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15426
          },
          {
            "timestamp": "2026-04-25 06:59:13,610",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15427
          },
          {
            "timestamp": "2026-04-25 06:59:13,610",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15428
          },
          {
            "timestamp": "2026-04-25 06:59:13,672",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15429
          },
          {
            "timestamp": "2026-04-25 06:59:13,672",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15430
          },
          {
            "timestamp": "2026-04-25 06:59:13,672",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15431
          },
          {
            "timestamp": "2026-04-25 06:59:13,672",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15432
          },
          {
            "timestamp": "2026-04-25 06:59:13,735",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15433
          },
          {
            "timestamp": "2026-04-25 06:59:13,735",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15434
          },
          {
            "timestamp": "2026-04-25 06:59:13,735",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15435
          },
          {
            "timestamp": "2026-04-25 06:59:13,797",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15436
          },
          {
            "timestamp": "2026-04-25 06:59:13,797",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15437
          },
          {
            "timestamp": "2026-04-25 06:59:13,797",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15438
          },
          {
            "timestamp": "2026-04-25 06:59:13,860",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15439
          },
          {
            "timestamp": "2026-04-25 06:59:13,860",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15440
          },
          {
            "timestamp": "2026-04-25 06:59:13,860",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15441
          },
          {
            "timestamp": "2026-04-25 06:59:13,860",
            "thread_id": "2616",
            "caller": "0x737bcda8",
            "parentcaller": "0x737bcc7a",
            "category": "misc",
            "api": "NtQuerySystemInformation",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "SystemInformationClass",
                "value": "8"
              }
            ],
            "repeated": 0,
            "id": 15442
          },
          {
            "timestamp": "2026-04-25 06:59:13,860",
            "thread_id": "2616",
            "caller": "0x7727611b",
            "parentcaller": "0x737856b7",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "500"
              }
            ],
            "repeated": 0,
            "id": 15443
          },
          {
            "timestamp": "2026-04-25 06:59:13,922",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15444
          },
          {
            "timestamp": "2026-04-25 06:59:13,922",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15445
          },
          {
            "timestamp": "2026-04-25 06:59:13,922",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15446
          },
          {
            "timestamp": "2026-04-25 06:59:13,922",
            "thread_id": "6328",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 1,
            "id": 15447
          },
          {
            "timestamp": "2026-04-25 06:59:13,985",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15448
          },
          {
            "timestamp": "2026-04-25 06:59:13,985",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15449
          },
          {
            "timestamp": "2026-04-25 06:59:13,985",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 0,
            "id": 15450
          },
          {
            "timestamp": "2026-04-25 06:59:14,047",
            "thread_id": "6328",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15451
          },
          {
            "timestamp": "2026-04-25 06:59:14,047",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15452
          },
          {
            "timestamp": "2026-04-25 06:59:14,047",
            "thread_id": "1416",
            "caller": "0x772627d9",
            "parentcaller": "0x737858bd",
            "category": "system",
            "api": "NtWaitForSingleObject",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Handle",
                "value": "0x00000464"
              },
              {
                "name": "Milliseconds",
                "value": "40000"
              }
            ],
            "repeated": 2,
            "id": 15453
          },
          {
            "timestamp": "2026-04-25 06:59:14,110",
            "thread_id": "1416",
            "caller": "0x737855cd",
            "parentcaller": "0x737ab77c",
            "category": "threading",
            "api": "NtYieldExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [],
            "repeated": 0,
            "id": 15454
          },
          {
            "timestamp": "2026-04-25 06:59:14,110",
            "thread_id": "7412",
            "caller": "0x7727611b",
            "parentcaller": "0x737ab043",
            "category": "system",
            "api": "NtDelayExecution",
            "status": true,
            "return": "0x00000000",
            "arguments": [
              {
                "name": "Milliseconds",
                "value": "50"
              }
            ],
            "repeated": 0,
            "id": 15455
          }
        ],
        "threads": [
          "6504",
          "8088",
          "8084",
          "8020",
          "5044",
          "2396",
          "6220",
          "7412",
          "6948",
          "2616",
          "1416",
          "3116",
          "3172",
          "160",
          "2660",
          "4596",
          "2784",
          "7440",
          "6328",
          "5976",
          "5852",
          "800",
          "8160",
          "1128",
          "5968"
        ],
        "environ": {
          "UserName": "cape",
          "ComputerName": "DESKTOP-PC01",
          "WindowsPath": "C:\\Windows",
          "TempPath": "C:\\Users\\cape\\AppData\\Local\\Temp\\",
          "CommandLine": "\"C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe\" ",
          "RegisteredOwner": "",
          "RegisteredOrganization": "",
          "ProductName": "",
          "SystemVolumeSerialNumber": "7c6d-8d48",
          "SystemVolumeGUID": "c48439d1-0000-0000-0000-100000000000",
          "MachineGUID": "",
          "MainExeBase": "0x00590000",
          "MainExeSize": "0x00038000",
          "Bitness": "32-bit"
        },
        "file_activities": {
          "read_files": [],
          "write_files": [],
          "delete_files": []
        }
      }
    ],
    "anomaly": [],
    "processtree": [
      {
        "name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "parent_id": 7304,
        "module_path": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "children": [],
        "threads": [
          "6504",
          "8088",
          "8084",
          "8020",
          "5044",
          "2396",
          "6220",
          "7412",
          "6948",
          "2616",
          "1416",
          "3116",
          "3172",
          "160",
          "2660",
          "4596",
          "2784",
          "7440",
          "6328",
          "5976",
          "5852",
          "800",
          "8160",
          "1128",
          "5968"
        ],
        "environ": {
          "UserName": "cape",
          "ComputerName": "DESKTOP-PC01",
          "WindowsPath": "C:\\Windows",
          "TempPath": "C:\\Users\\cape\\AppData\\Local\\Temp\\",
          "CommandLine": "\"C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe\" ",
          "RegisteredOwner": "",
          "RegisteredOrganization": "",
          "ProductName": "",
          "SystemVolumeSerialNumber": "7c6d-8d48",
          "SystemVolumeGUID": "c48439d1-0000-0000-0000-100000000000",
          "MachineGUID": "",
          "MainExeBase": "0x00590000",
          "MainExeSize": "0x00038000",
          "Bitness": "32-bit"
        }
      }
    ],
    "summary": {
      "files": [
        "C:\\Windows\\System32\\MSCOREE.DLL.local",
        "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll",
        "C:\\Windows\\Microsoft.NET\\Framework\\*",
        "C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll",
        "C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll",
        "C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll",
        "C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll",
        "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe.config",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
        "C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\\msvcr80.dll",
        "C:\\Windows",
        "C:\\Windows\\WinSxS",
        "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\fusion.localgac",
        "C:\\Users\\cape\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\91d880890f6e481edcbe.exe.log",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\security.config",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\security.config.cch",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\enterprisesec.config",
        "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\enterprisesec.config.cch",
        "C:\\Windows\\System32\\windows.storage.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\Wldp.dll",
        "C:\\Windows\\System32\\wldp.dll",
        "C:\\Users\\cape\\AppData\\Roaming\\Microsoft\\CLR Security Config\\v2.0.50727.312\\security.config",
        "C:\\Users\\cape\\AppData\\Roaming\\Microsoft\\CLR Security Config\\v2.0.50727.312\\security.config.cch",
        "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\indexc.dat",
        "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.INI",
        "C:\\Users",
        "C:\\Users\\cape",
        "C:\\Users\\cape\\AppData",
        "C:\\Users\\cape\\AppData\\Local",
        "C:\\Users\\cape\\AppData\\Local\\Temp",
        "C:\\Windows\\System32\\bcryptPrimitives.dll",
        "\\Device\\CNG",
        "C:\\Windows\\System32\\l_intl.nls",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.INI",
        "C:\\Windows\\assembly\\pubpol5.dat",
        "C:\\Windows\\assembly\\GAC\\PublisherPolicy.tme",
        "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.INI",
        "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.INI",
        "C:\\Windows\\assembly\\GAC_MSIL\\System.Drawing\\2.0.0.0__b03f5f7f11d50a3a\\System.Drawing.INI",
        "C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a",
        "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a",
        "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll",
        "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.INI",
        "C:\\Windows\\Globalization\\ru-ru.nlp",
        "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll",
        "C:\\Windows\\System32\\msctf.dll",
        "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\USER32.dll.mui",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\CRYPTSP.dll",
        "C:\\Windows\\System32\\cryptsp.dll",
        "\\Device\\ConDrv\\Server",
        "\\Device\\ConDrv\\\\Reference",
        "\\Device\\ConDrv\\\\Connect",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A",
        "C:\\Users\\cape\\AppData\\Roaming",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Exceptions\\1.2.2.0",
        "C:\\Windows\\System32\\tzres.dll",
        "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe\\Windows\\System32\\ru-RU\\tzres.dll.mui",
        "C:\\Windows\\System32\\ru-RU\\tzres.dll.mui",
        "C:\\Windows\\sysnative\\ru-RU\\tzres.dll.mui",
        "C:\\Program Files (x86)\\NAT Subsystem",
        "C:\\Program Files (x86)",
        "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe",
        "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp",
        "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\NAT Subsystem\\natss.exe",
        "C:\\Windows\\Globalization\\en-us.nlp",
        "C:\\Windows\\assembly\\GAC_32\\mscorlib.resources\\2.0.0.0_ru-RU_b77a5c561934e089",
        "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru-RU_b77a5c561934e089",
        "C:\\Windows\\assembly\\GAC\\mscorlib.resources\\2.0.0.0_ru-RU_b77a5c561934e089",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources\\mscorlib.resources.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\mscorlib.resources\\mscorlib.resources.exe",
        "C:\\Windows\\Globalization\\ru.nlp",
        "C:\\Windows\\assembly\\GAC_32\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089",
        "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089",
        "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll",
        "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.INI",
        "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll",
        "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.pdb",
        "C:\\Windows\\symbols\\dll\\mscorlib.pdb",
        "C:\\Windows\\dll\\mscorlib.pdb",
        "C:\\Windows\\mscorlib.pdb",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.PDB",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe:Zone.Identifier",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\catalog.dat",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\storage.dat",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin\\ClientPlugin.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ClientPlugin\\ClientPlugin.exe",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\settings.bin",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\settings.bak",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs\\cape",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#\\Lzma#.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\Lzma#\\Lzma#.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru-RU\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.dll",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\ru\\SurveillanceExClientPlugin.resources\\SurveillanceExClientPlugin.resources.exe",
        "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll",
        "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.INI",
        "C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.INI"
      ],
      "read_files": [
        "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
      ],
      "write_files": [
        "\\Device\\ConDrv\\Server",
        "\\Device\\ConDrv\\\\Reference",
        "\\Device\\ConDrv\\\\Connect",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat",
        "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
      ],
      "delete_files": [
        "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe",
        "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\NAT Subsystem\\natss.exe",
        "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe:Zone.Identifier"
      ],
      "keys": [
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Policy\\",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\v4.0",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\.NETFramework",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\UseLegacyV2RuntimeActivationPolicyDefaultValue",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\OnlyUseLatestCLR",
        "Policy\\Standards",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Policy\\Standards",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\standards\\v2.0.50727",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Fusion\\NoClientChecks",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStart",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStartAtJit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DisableConfigCache",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Policy\\AppPatch",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\policy\\AppPatch\\v4.0.30319.00000\\mscorwks.dll",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\91d880890f6e481edcbe.exe",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\CacheLocation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DownloadCacheQuotaInKB",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Fusion",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\EnableLog",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LoggingLevel",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\ForceLog",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogFailures",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\VersioningLog",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogResourceBinds",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\UseLegacyIdentityFormat",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DisableMSIPeek",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NoClientChecks",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\DevOverrideEnable",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\NGen\\Policy\\v2.0",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\NGen\\Policy\\v2.0\\OptimizeUsedBinaries",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\Internet",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\Security\\Policy\\Extensions\\NamedPermissionSets\\LocalIntranet",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-3749840076-4109591986-3192690632-1000",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\.NETFramework\\v2.0.50727\\Security\\Policy",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\NIUsageMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\ILUsageMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\LastModTime",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\GACChangeNotification\\Default",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\mscorlib,2.0.0.0,,b77a5c561934e089,x86",
        "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\STE",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled",
        "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Policies\\Microsoft\\Cryptography\\Configuration",
        "HKEY_CURRENT_USER",
        "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize",
        "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize\\AppsUseLightTheme",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\5aa75839\\10fdf3",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\StrongName",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\PublisherPolicy\\Default",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\Latest",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\index5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\LegacyPolicyTimeStamp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Windows.Forms__b77a5c561934e089",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Drawing__b03f5f7f11d50a3a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System__b77a5c561934e089",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Xml__b77a5c561934e089",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Configuration__b03f5f7f11d50a3a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Deployment__b03f5f7f11d50a3a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.Accessibility__b03f5f7f11d50a3a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Security__b03f5f7f11d50a3a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\.NETFramework\\Policy\\APTCA",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\1c22df2f\\4f99a7c9",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgJITDebugLaunchSetting",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgManagedDebugger",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\SideBySide",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\SideBySide\\PreferExternalManifest",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
        "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\StateSeparation\\RedirectionMap\\Keys",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA",
        "HKEY_CURRENT_USER\\Control Panel\\International",
        "HKEY_CURRENT_USER\\Control Panel\\International\\sYearMonth",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
        "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.mscorlib.resources_ru-RU_b77a5c561934e089",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\5e8c75c\\de7da15",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-3749840076-4109591986-3192690632-1000\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\C:|Users|cape|AppData|Local|Temp|91d880890f6e481edcbe.exe",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-3749840076-4109591986-3192690632-1000\\Installer\\Assemblies\\Global",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Assemblies\\Global",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Assemblies\\Global",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.mscorlib.resources_ru_b77a5c561934e089",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\5e8c75c\\2f231edf",
        "HKEY_CLASSES_ROOT\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)",
        "HKEY_CLASSES_ROOT\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\AlwaysReadHKCRForCLSIDs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\4ecde57e\\31d9ddbb",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\a054161\\46043f61",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\219e9581\\3b405a35",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\219e9581\\26de983b",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows NT\\CurrentVersion\\InstallationType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\159a66b8\\424bd4d8",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\policy.2.0.System.Data.SqlXml__b77a5c561934e089",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Library",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\IsMultiInstance",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\First Counter",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\CategoryOptions",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\FileMappingSize",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Counter Names"
      ],
      "read_keys": [
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\UseLegacyV2RuntimeActivationPolicyDefaultValue",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\OnlyUseLatestCLR",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Fusion\\NoClientChecks",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStart",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStartAtJit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DisableConfigCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\CacheLocation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DownloadCacheQuotaInKB",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\EnableLog",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LoggingLevel",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\ForceLog",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogFailures",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\VersioningLog",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogResourceBinds",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\UseLegacyIdentityFormat",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DisableMSIPeek",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NoClientChecks",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\DevOverrideEnable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\NGen\\Policy\\v2.0\\OptimizeUsedBinaries",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\NIUsageMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\ILUsageMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\mscorlib,2.0.0.0,,b77a5c561934e089,x86",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\STE",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled",
        "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize\\AppsUseLightTheme",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\Latest",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\index5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\LegacyPolicyTimeStamp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgJITDebugLaunchSetting",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgManagedDebugger",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\SideBySide\\PreferExternalManifest",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA",
        "HKEY_CURRENT_USER\\Control Panel\\International\\sYearMonth",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem",
        "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\AlwaysReadHKCRForCLSIDs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows NT\\CurrentVersion\\InstallationType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigMask",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MVID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\EvalationData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ILDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\NIDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MissingDependencies",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Status",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Modules",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\SIG",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\LastModTime",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Library",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\IsMultiInstance",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\First Counter",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\CategoryOptions",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\FileMappingSize",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Counter Names"
      ],
      "write_keys": [
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem"
      ],
      "delete_keys": [],
      "executed_commands": [],
      "resolved_apis": [],
      "mutexes": [
        "Local\\SM0:6484:168:WilStaging_02",
        "Global\\CLR_CASOFF_MUTEX",
        "Global\\{80a8cf76-041f-4f9a-8ed2-2be59774b180}",
        "Global\\.net clr networking"
      ],
      "created_services": [],
      "started_services": []
    },
    "enhanced": [
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:57,735",
        "eid": 1,
        "data": {
          "file": "ADVAPI32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76ea0000"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:57,797",
        "eid": 2,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:57,797",
        "eid": 3,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": "C:\\Windows\\Microsoft.NET\\Framework\\"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:57,938",
        "eid": 4,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:57,938",
        "eid": 5,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": "C:\\Windows\\Microsoft.NET\\Framework\\"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:57,938",
        "eid": 6,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:57,938",
        "eid": 7,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": "C:\\Windows\\Microsoft.NET\\Framework\\"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,672",
        "eid": 8,
        "data": {
          "file": "api-ms-win-core-synch-l1-2-0",
          "pathtofile": null,
          "moduleaddress": "0x77150000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,672",
        "eid": 9,
        "data": {
          "file": "api-ms-win-core-fibers-l1-1-1",
          "pathtofile": null,
          "moduleaddress": "0x77150000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,672",
        "eid": 10,
        "data": {
          "file": "api-ms-win-core-synch-l1-2-0",
          "pathtofile": null,
          "moduleaddress": "0x77150000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,672",
        "eid": 11,
        "data": {
          "file": "api-ms-win-core-fibers-l1-1-1",
          "pathtofile": null,
          "moduleaddress": "0x77150000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,735",
        "eid": 12,
        "data": {
          "file": "api-ms-win-core-localization-l1-2-1",
          "pathtofile": null,
          "moduleaddress": "0x77150000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,735",
        "eid": 13,
        "data": {
          "file": "ADVAPI32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76ea0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,735",
        "eid": 14,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll",
          "pathtofile": null,
          "moduleaddress": "0x73db0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,735",
        "eid": 15,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:58,735",
        "eid": 16,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:58,735",
        "eid": 17,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\InstallRoot",
          "content": "C:\\Windows\\Microsoft.NET\\Framework\\"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:58,985",
        "eid": 18,
        "data": {
          "file": "SHLWAPI.dll",
          "pathtofile": null,
          "moduleaddress": "0x76f20000"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:58,985",
        "eid": 19,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\UseLegacyV2RuntimeActivationPolicyDefaultValue",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:58,985",
        "eid": 20,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\OnlyUseLatestCLR",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:59,391",
        "eid": 21,
        "data": {
          "file": "api-ms-win-appmodel-runtime-l1-1-2.dll",
          "pathtofile": null,
          "moduleaddress": "0x75250000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:59,391",
        "eid": 22,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:55:59,391",
        "eid": 23,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Fusion\\NoClientChecks",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:55:59,391",
        "eid": 24,
        "data": {
          "file": "VERSION.dll",
          "pathtofile": null,
          "moduleaddress": "0x75460000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:04,922",
        "eid": 25,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:04,922",
        "eid": 26,
        "data": {
          "file": "MSCoree.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:04,922",
        "eid": 27,
        "data": {
          "file": "PGORT80.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:05,063",
        "eid": 28,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:05,579",
        "eid": 29,
        "data": {
          "file": "mscoree.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:06,860",
        "eid": 30,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStart",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:06,860",
        "eid": 31,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStartAtJit",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:06,860",
        "eid": 32,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStart",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:06,876",
        "eid": 33,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\GCStressStartAtJit",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:07,079",
        "eid": 34,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll",
          "pathtofile": null,
          "moduleaddress": "0x73780000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:07,079",
        "eid": 35,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:07,079",
        "eid": 36,
        "data": {
          "file": "USER32.dll",
          "pathtofile": null,
          "moduleaddress": "0x75d10000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:07,235",
        "eid": 37,
        "data": {
          "file": "mscorwks.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:07,376",
        "eid": 38,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DisableConfigCache",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:07,641",
        "eid": 39,
        "data": {
          "file": "advapi32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:09,016",
        "eid": 40,
        "data": {
          "file": "mscoree.dll",
          "pathtofile": null,
          "moduleaddress": "0x74160000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:09,016",
        "eid": 41,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:09,251",
        "eid": 42,
        "data": {
          "file": "mscoree.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:09,251",
        "eid": 43,
        "data": {
          "file": "mscoree.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:09,704",
        "eid": 44,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:09,797",
        "eid": 45,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:09,844",
        "eid": 46,
        "data": {
          "file": "ntdll",
          "pathtofile": null,
          "moduleaddress": "0x77e40000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:09,844",
        "eid": 47,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:09,891",
        "eid": 48,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 49,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\CacheLocation",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 50,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 51,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DownloadCacheQuotaInKB",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 52,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\EnableLog",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 53,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LoggingLevel",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 54,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\ForceLog",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 55,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogFailures",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 56,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\VersioningLog",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 57,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\LogResourceBinds",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 58,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\UseLegacyIdentityFormat",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 59,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\DisableMSIPeek",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 60,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NoClientChecks",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,454",
        "eid": 61,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\DevOverrideEnable",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,532",
        "eid": 62,
        "data": {
          "file": "advapi32",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,547",
        "eid": 63,
        "data": {
          "file": "advapi32",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,626",
        "eid": 64,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:10,626",
        "eid": 65,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\NGen\\Policy\\v2.0\\OptimizeUsedBinaries",
          "content": "1"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,672",
        "eid": 66,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,844",
        "eid": 67,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,860",
        "eid": 68,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,954",
        "eid": 69,
        "data": {
          "file": "advapi32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76ea0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,954",
        "eid": 70,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,954",
        "eid": 71,
        "data": {
          "file": "shell32.dll",
          "pathtofile": null,
          "moduleaddress": "0x77590000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,954",
        "eid": 72,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 73,
        "data": {
          "file": "DDRAW.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 74,
        "data": {
          "file": "D3D8.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 75,
        "data": {
          "file": "D3D9.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 76,
        "data": {
          "file": "DDRAW.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 77,
        "data": {
          "file": "D3D8.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 78,
        "data": {
          "file": "D3D9.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 79,
        "data": {
          "file": "api-ms-win-eventing-provider-l1-1-0.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 80,
        "data": {
          "file": "api-ms-win-core-synch-l1-2-0.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:10,985",
        "eid": 81,
        "data": {
          "file": "ntdll.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:13,110",
        "eid": 82,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76ab0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:13,126",
        "eid": 83,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:13,126",
        "eid": 84,
        "data": {
          "file": "Kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:13,126",
        "eid": 85,
        "data": {
          "file": "Kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:13,297",
        "eid": 86,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,454",
        "eid": 87,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex",
          "content": "12"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,454",
        "eid": 88,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex",
          "content": "12"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,641",
        "eid": 89,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\NIUsageMask",
          "content": "\\xff\\xe1"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,641",
        "eid": 90,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\indexc\\ILUsageMask",
          "content": "\\xff\\xff\\xff\\xf1"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,641",
        "eid": 91,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\DisplayName",
          "content": "mscorlib,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,641",
        "eid": 92,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigMask",
          "content": "4361"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,641",
        "eid": 93,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ConfigString",
          "content": ""
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,641",
        "eid": 94,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MVID",
          "content": "\\x07\\xfe\\xde\\xcf;\\x96LM&\\xa6\\xec\\x99B&\\xef\\xe4"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 95,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\EvalationData",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 96,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\Status",
          "content": "0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 97,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\ILDependencies",
          "content": "\\xc5\\xe2Py\\xba{\\xb8\\x0c\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 98,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\NIDependencies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 99,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\181938c6\\7950e2c5\\1\\MissingDependencies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 100,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\DisplayName",
          "content": "mscorlib,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 101,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Status",
          "content": "8198"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 102,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\Modules",
          "content": "sortkey.nlp|sorttbls.nlp|big5.nlp|bopomofo.nlp|ksc.nlp|prc.nlp|prcp.nlp|xjis.nlp|normidna.nlp|normnfc.nlp|normnfd.nlp|normnfkc.nlp|normnfkd.nlp"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 103,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\SIG",
          "content": "\\xb23\\xc7M\\xdf\\xb0\\xb0D\\xba\\xbf+\\xb7\\xcf\\xfd\\xf4\\xab\\x91th\\x7f\\xa9w\\xa2\\xc6\\xae\\xd2Yqa\\xe9\\xe1\\x81\\x9d\\xe9K\\xa9"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:13,876",
        "eid": 104,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\7950e2c5\\cb87bba\\1\\LastModTime",
          "content": "m\\xa7>\\xfb\\x06\\xac\\xdc\\x01"
        }
      },
      {
        "event": "write",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:14,001",
        "eid": 105,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Fusion\\GACChangeNotification\\Default"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:14,001",
        "eid": 106,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\mscorlib,2.0.0.0,,b77a5c561934e089,x86",
          "content": "m\\xa7>\\xfb\\x06\\xac\\xdc\\x01"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:17,876",
        "eid": 107,
        "data": {
          "file": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\07fedecf3b964c4d26a6ec994226efe4\\mscorlib.ni.dll",
          "pathtofile": null,
          "moduleaddress": "0x72be0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:17,876",
        "eid": 108,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:18,844",
        "eid": 109,
        "data": {
          "file": "MSCORWKS.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:18,844",
        "eid": 110,
        "data": {
          "file": "mscorjit.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 111,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ole32.dll",
          "pathtofile": null,
          "moduleaddress": "0x00000000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 112,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 113,
        "data": {
          "file": "ole32.dll",
          "pathtofile": null,
          "moduleaddress": "0x77060000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 114,
        "data": {
          "file": "C:\\Windows\\system32\\rpcss.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 115,
        "data": {
          "file": "DDRAW.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 116,
        "data": {
          "file": "D3D8.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 117,
        "data": {
          "file": "D3D9.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 118,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\STE",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 119,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled",
          "content": "0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 120,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:21,297",
        "eid": 121,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,313",
        "eid": 122,
        "data": {
          "file": "C:\\Windows\\System32\\uxtheme.dll",
          "pathtofile": null,
          "moduleaddress": "0x745d0000"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:21,313",
        "eid": 123,
        "data": {
          "regkey": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize\\AppsUseLightTheme",
          "content": "1"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,313",
        "eid": 124,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,313",
        "eid": 125,
        "data": {
          "file": "ole32.dll",
          "pathtofile": null,
          "moduleaddress": "0x77060000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:21,313",
        "eid": 126,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:24,704",
        "eid": 127,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76ab0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:24,704",
        "eid": 128,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,016",
        "eid": 129,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\LatestIndex",
          "content": "12"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:26,672",
        "eid": 130,
        "data": {
          "file": "AdvApi32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76ea0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:26,672",
        "eid": 131,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:26,860",
        "eid": 132,
        "data": {
          "file": "mscoree.dll",
          "pathtofile": null,
          "moduleaddress": "0x74160000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:26,860",
        "eid": 133,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,860",
        "eid": 134,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\Latest",
          "content": "5"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,860",
        "eid": 135,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\index5",
          "content": "\\x1f"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,860",
        "eid": 136,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\PublisherPolicy\\Default\\LegacyPolicyTimeStamp",
          "content": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:26,876",
        "eid": 137,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:26,876",
        "eid": 138,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 139,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\DisplayName",
          "content": "System.Windows.Forms,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 140,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigMask",
          "content": "4361"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 141,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ConfigString",
          "content": ""
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 142,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MVID",
          "content": "\\x19N\\x1e\\x92\\xbf\\xaeS\\x96\\x08e\\x18\\xc2\\xec\n\\x0ft"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 143,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\EvalationData",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 144,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\Status",
          "content": "0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 145,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\ILDependencies",
          "content": "@\\xce]G\\xb6\\xf9\\x10\\x19\\x02\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00W\\x8d\\xab\\x19t&\\xa3.\\x07\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00P\\xac\\xd6-\\xb7\\xf8\\xf1%\\x03\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xd8\\xd4KB\\xd5\\x04\\xc5\\x0c\\x06\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00~L\\xc0AT\\xf5Wz\\x1d\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xc5Y\\xed<\\x00\\xa2\\x0bb\\x0e\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00d\\x10\\x99\\x0cX\\xb0\\xeb\\x7f\\x1e\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 146,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\NIDependencies",
          "content": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O|\\xbc0O\\xfeP?\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xa0\\x06\\xca<\\xc0\\xd4\\xc7m\\x0f\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 147,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\61e7e666\\c991064\\e\\MissingDependencies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 148,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\DisplayName",
          "content": "System.Security,2.0.0.0,,b03f5f7f11d50a3a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 149,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 150,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 151,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\SIG",
          "content": "\\x08\\x03VdL\\xe0}B\\xb3\\x80\\x140i\\xbf^\\xfcT0=\\xdb\\xb5\\x9b\\x9b[1\\xba\\xbe\\xf8I\\x1e\n\\x06G\\xa7\\xbf "
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 152,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\475dce40\\1910f9b6\\2\\LastModTime",
          "content": "\\xa3k\\xc9@\\x07\\xac\\xdc\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 153,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\DisplayName",
          "content": "System.Xml,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 154,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 155,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 156,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\SIG",
          "content": "\\xb2\\x1aNYhyhC\\xa1\\xe5\\x96\\xe9\\x9a\\xf9@\\xad\\x19-\\x99{\\x90v\\xc4\\xa3+&d\\x93s{\\x8e\\xce\\x92\\x18\\xc5\\xc6"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 157,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\19ab8d57\\2ea32674\\7\\LastModTime",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 158,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\DisplayName",
          "content": "Accessibility,2.0.0.0,,b03f5f7f11d50a3a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 159,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 160,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 161,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\SIG",
          "content": "z\\xb1\\xaa^\\x82\\x82\\x9bJ\\x84\\x94\\xe5%\\x92\\xf5P\r\\xd2\\xaf\\x11Z\\xf2&\\x19R\\x02V\\x821_\\\\xabW\\xeb\\xe8\\xb4\\xef"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 162,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\2dd6ac50\\25f1f8b7\\3\\LastModTime",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 163,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\DisplayName",
          "content": "System.Configuration,2.0.0.0,,b03f5f7f11d50a3a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 164,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 165,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 166,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\SIG",
          "content": ";\\xf2\\x93\\x1d\\xca\\xffYI\\xab\\xdc&X\\x07\\xe4$-!M\\xd0D\\x87\\xd2\\xcbu\\xd7)\\x06\\xd2\\xf2\\x1b\\x07\n{\\xefi\\xab"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 167,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\424bd4d8\\cc504d5\\6\\LastModTime",
          "content": "Zk\\xb2'\\x07\\xac\\xdc\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 168,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\DisplayName",
          "content": "System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 169,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 170,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 171,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\SIG",
          "content": "P\\xd0O\\xcbR]\\x90@\\x85\\x86M\\x87\\x82\r\\xa8\\xdd~\\x17\\xf4\\xe2\\x84\\xca\\x8c\\xfd-\\xacs\\xce\\xf7 \\xc3/\\xb3\\xcft\\xbf"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 172,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\41c04c7e\\7a57f554\\1d\\LastModTime",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 173,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\DisplayName",
          "content": "System.Deployment,2.0.0.0,,b03f5f7f11d50a3a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 174,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 175,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 176,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\SIG",
          "content": "\\xe1\\x8a\\xf5\\x0e\\xe2q\\x8bN\\x97\nB#\\x17\\x8a\\xe6\\xf3\\xe4i\\x1a\\xeeJVa\\\\xcb\\x0ff)\\x08UQ\\x86\\x80E\\x08\\x1a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 177,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3ced59c5\\620ba200\\e\\LastModTime",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 178,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\DisplayName",
          "content": "System.Windows.Forms,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 179,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 180,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 181,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\SIG",
          "content": "\\x84\\xda\\xb9\\xe2\\xe1\\5I\\x8c\\xe5a\\xb1\\xb8\\x91\\xd5\\xf7\\xeeKz\\x06#R\\x17\\xc9\\xbf0\\xed\\xbb\\x91p\\x9a#Zk@\\xd5"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 182,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\c991064\\7febb058\\1e\\LastModTime",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 183,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\DisplayName",
          "content": "System,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 184,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigMask",
          "content": "4361"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 185,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ConfigString",
          "content": ""
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 186,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MVID",
          "content": "\\xc6\r\\xd1\\xee\\x84;\\xa8\\xff\\x9e\\xe7\\xed\\xcdc\\x029;"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 187,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\EvalationData",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 188,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\Status",
          "content": "0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 189,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\ILDependencies",
          "content": "\\xd8\\xd4KB\\xd5\\x04\\xc5\\x0c\\x06\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00W\\x8d\\xab\\x19t&\\xa3.\\x07\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O\\xfeP?\\xe6\\xad\\xb2G\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 190,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\NIDependencies",
          "content": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 191,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\30bc7c4f\\3f50fe4f\\8\\MissingDependencies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 192,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\DisplayName",
          "content": "System,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 193,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 194,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 195,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\SIG",
          "content": "\\xd40\\\\x82\\xcf\\xa4LF\\xb7\\xeb\\xb8\\x14XT\\xd1\\xf81\\x82\\x8d\\xfa\\x12E\\x8d}\\x7f\\x90'\\xf5\\xa5\\x82\\xdb\\x0c\\x14c\\x12\\x1a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 196,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\3f50fe4f\\47b2ade6\\8\\LastModTime",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 197,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\DisplayName",
          "content": "System.Drawing,2.0.0.0,,b03f5f7f11d50a3a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 198,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigMask",
          "content": "4361"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 199,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ConfigString",
          "content": ""
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 200,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MVID",
          "content": "\\xa0=\\xd8\\x87\\x19)\\x95\\h\\x022h,\\x94d\\xa0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 201,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\EvalationData",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 202,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\Status",
          "content": "0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,907",
        "eid": 203,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\ILDependencies",
          "content": "\\xc0\\xd4\\xc7m\\x16\\x96\\x94$\\x10\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 204,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\NIDependencies",
          "content": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O|\\xbc0O\\xfeP?\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 205,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\3cca06a0\\6dc7d4c0\\f\\MissingDependencies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 206,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\DisplayName",
          "content": "System.Drawing,2.0.0.0,,b03f5f7f11d50a3a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 207,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 208,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 209,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\SIG",
          "content": "\\x7fX\\xbb\\xfa\\x0e\\xf2\\xcbD\\x91\\xf4^\\x19\\xf6\r\r\\x0c\\xab\\x0eq\\xfcgB\\x12\\xe3\\xe8\\xe5\\x99Q\\x80\\xb8\\x0bu\\xdc\\x16\\x14?"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 210,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\6dc7d4c0\\24949616\\10\\LastModTime",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 211,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 212,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 213,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System,2.0.0.0,,b77a5c561934e089,MSIL",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 214,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:26,922",
        "eid": 215,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
          "content": "Zk\\xb2'\\x07\\xac\\xdc\\x01"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:27,891",
        "eid": 216,
        "data": {
          "file": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\c60dd1ee843ba8ff9ee7edcd6302393b\\System.ni.dll",
          "pathtofile": null,
          "moduleaddress": "0x72430000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:27,891",
        "eid": 217,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,235",
        "eid": 218,
        "data": {
          "file": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\a03dd8871929955c680232682c9464a0\\System.Drawing.ni.dll",
          "pathtofile": null,
          "moduleaddress": "0x722a0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,235",
        "eid": 219,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:28,282",
        "eid": 220,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:28,297",
        "eid": 221,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:28,297",
        "eid": 222,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
          "content": "\\x00.\\xa1\\xe9;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:28,297",
        "eid": 223,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL",
          "content": "\\xa3k\\xc9@\\x07\\xac\\xdc\\x01"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,360",
        "eid": 224,
        "data": {
          "file": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\194e1e92bfae5396086518c2ec0a0f74\\System.Windows.Forms.ni.dll",
          "pathtofile": null,
          "moduleaddress": "0x716c0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,376",
        "eid": 225,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,438",
        "eid": 226,
        "data": {
          "file": "MSCORWKS.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,438",
        "eid": 227,
        "data": {
          "file": "mscorjit.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,610",
        "eid": 228,
        "data": {
          "file": "MSCORWKS.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,610",
        "eid": 229,
        "data": {
          "file": "mscorjit.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,688",
        "eid": 230,
        "data": {
          "file": "MSCORWKS.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,688",
        "eid": 231,
        "data": {
          "file": "mscorjit.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,938",
        "eid": 232,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll",
          "pathtofile": null,
          "moduleaddress": "0x71660000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,938",
        "eid": 233,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:28,938",
        "eid": 234,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:29,094",
        "eid": 235,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll",
          "pathtofile": null,
          "moduleaddress": "0x07610000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:29,094",
        "eid": 236,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:29,297",
        "eid": 237,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\VERSION.dll",
          "pathtofile": null,
          "moduleaddress": "0x00000000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:29,297",
        "eid": 238,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:29,297",
        "eid": 239,
        "data": {
          "file": "VERSION.dll",
          "pathtofile": null,
          "moduleaddress": "0x75460000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:29,876",
        "eid": 240,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,094",
        "eid": 241,
        "data": {
          "file": "ntdll.dll",
          "pathtofile": null,
          "moduleaddress": "0x77e40000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,094",
        "eid": 242,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,157",
        "eid": 243,
        "data": {
          "file": "user32.dll",
          "pathtofile": null,
          "moduleaddress": "0x75d10000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,157",
        "eid": 244,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,219",
        "eid": 245,
        "data": {
          "file": "user32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,219",
        "eid": 246,
        "data": {
          "file": "gdi32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76a80000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,219",
        "eid": 247,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,235",
        "eid": 248,
        "data": {
          "file": "advapi32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76ea0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,235",
        "eid": 249,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:30,235",
        "eid": 250,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgJITDebugLaunchSetting",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:30,235",
        "eid": 251,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\DbgManagedDebugger",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,297",
        "eid": 252,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\uxtheme.dll",
          "pathtofile": null,
          "moduleaddress": "0x00000000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,297",
        "eid": 253,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,297",
        "eid": 254,
        "data": {
          "file": "uxtheme.dll",
          "pathtofile": null,
          "moduleaddress": "0x745d0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,297",
        "eid": 255,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:30,344",
        "eid": 256,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\SideBySide\\PreferExternalManifest",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,516",
        "eid": 257,
        "data": {
          "file": "DDRAW.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,516",
        "eid": 258,
        "data": {
          "file": "D3D8.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,516",
        "eid": 259,
        "data": {
          "file": "D3D9.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:30,579",
        "eid": 260,
        "data": {
          "file": "ntdll.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:31,001",
        "eid": 261,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:31,157",
        "eid": 262,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest",
          "content": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,172",
        "eid": 263,
        "data": {
          "file": "ole32.dll",
          "pathtofile": null,
          "moduleaddress": "0x77060000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,172",
        "eid": 264,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,626",
        "eid": 265,
        "data": {
          "file": "DDRAW.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,626",
        "eid": 266,
        "data": {
          "file": "D3D8.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,626",
        "eid": 267,
        "data": {
          "file": "D3D9.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,641",
        "eid": 268,
        "data": {
          "file": "C:\\Windows\\System32\\rsaenh.dll",
          "pathtofile": null,
          "moduleaddress": "0x74c10000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,641",
        "eid": 269,
        "data": {
          "file": "C:\\Windows\\System32\\bcryptprimitives.dll",
          "pathtofile": null,
          "moduleaddress": "0x76d80000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,641",
        "eid": 270,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\bcrypt.dll",
          "pathtofile": null,
          "moduleaddress": "0x00000000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,641",
        "eid": 271,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,641",
        "eid": 272,
        "data": {
          "file": "bcrypt.dll",
          "pathtofile": null,
          "moduleaddress": "0x76160000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,641",
        "eid": 273,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:31,657",
        "eid": 274,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled",
          "content": "0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:31,657",
        "eid": 275,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:31,657",
        "eid": 276,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,704",
        "eid": 277,
        "data": {
          "file": "C:\\Windows\\System32\\rsaenh.dll",
          "pathtofile": null,
          "moduleaddress": "0x74c10000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:31,719",
        "eid": 278,
        "data": {
          "file": "C:\\Windows\\System32\\rsaenh.dll",
          "pathtofile": null,
          "moduleaddress": "0x74c10000"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:32,266",
        "eid": 279,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:32,735",
        "eid": 280,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:32,735",
        "eid": 281,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid",
          "content": "339d92a4-c255-4420-97b0-5631bd58867a"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:32,735",
        "eid": 282,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:32,735",
        "eid": 283,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA",
          "content": "0"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:32,766",
        "eid": 284,
        "data": {
          "file": "shfolder.dll",
          "pathtofile": null,
          "moduleaddress": "0x70f00000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:32,766",
        "eid": 285,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "create",
        "object": "dir",
        "timestamp": "2026-04-25 06:56:32,766",
        "eid": 286,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:32,860",
        "eid": 287,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:33,047",
        "eid": 288,
        "data": {
          "file": "ntdll.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:33,047",
        "eid": 289,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest",
          "content": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:33,063",
        "eid": 290,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\LanguageOverlay\\OverlayPackages\\ru-RU\\Latest",
          "content": "C:\\Program Files\\WindowsApps\\Microsoft.LanguageExperiencePackru-RU_19041.80.272.0_neutral__8wekyb3d8bbwe"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,063",
        "eid": 291,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 292,
        "data": {
          "regkey": "HKEY_CURRENT_USER\\Control Panel\\International\\sYearMonth",
          "content": null
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 293,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 294,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 295,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 296,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 297,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 298,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 299,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 300,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 301,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,079",
        "eid": 302,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 303,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 304,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 305,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 306,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 307,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 308,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 309,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 310,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 311,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 312,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,094",
        "eid": 313,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 314,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 315,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 316,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 317,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 318,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 319,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 320,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 321,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 322,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 323,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 324,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 325,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 326,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 327,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 328,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,110",
        "eid": 329,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 330,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 331,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 332,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 333,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 334,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 335,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 336,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,126",
        "eid": 337,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,188",
        "eid": 338,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,188",
        "eid": 339,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,188",
        "eid": 340,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "write",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,188",
        "eid": 341,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\client.log"
        }
      },
      {
        "event": "create",
        "object": "dir",
        "timestamp": "2026-04-25 06:56:33,204",
        "eid": 342,
        "data": {
          "file": "C:\\Program Files (x86)\\NAT Subsystem"
        }
      },
      {
        "event": "delete",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,329",
        "eid": 343,
        "data": {
          "file": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
        }
      },
      {
        "event": "copy",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,532",
        "eid": 344,
        "data": {
          "from": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe",
          "to": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:33,532",
        "eid": 345,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem",
          "content": null
        }
      },
      {
        "event": "write",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:33,610",
        "eid": 346,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem",
          "content": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:33,610",
        "eid": 347,
        "data": {
          "regkey": "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem",
          "content": null
        }
      },
      {
        "event": "delete",
        "object": "file",
        "timestamp": "2026-04-25 06:56:33,922",
        "eid": 348,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\NAT Subsystem\\natss.exe"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,094",
        "eid": 349,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Culture.dll",
          "pathtofile": null,
          "moduleaddress": "0x70ec0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,094",
        "eid": 350,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,094",
        "eid": 351,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,188",
        "eid": 352,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,204",
        "eid": 353,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_MSIL\\mscorlib.resources\\2.0.0.0_ru_b77a5c561934e089\\mscorlib.resources.dll",
          "pathtofile": null,
          "moduleaddress": "0x07970000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,204",
        "eid": 354,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,360",
        "eid": 355,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,360",
        "eid": 356,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)",
          "content": "C:\\Windows\\SysWOW64\\mscoree.dll"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,360",
        "eid": 357,
        "data": {
          "file": "C:\\Windows\\SysWOW64\\mscoree.dll",
          "pathtofile": null,
          "moduleaddress": "0x74160000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,360",
        "eid": 358,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,360",
        "eid": 359,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,360",
        "eid": 360,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)",
          "content": "diasymreader.dll"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,360",
        "eid": 361,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\.NETFramework\\AlwaysReadHKCRForCLSIDs",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,376",
        "eid": 362,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,376",
        "eid": 363,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\Server\\(Default)",
          "content": "diasymreader.dll"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,563",
        "eid": 364,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,563",
        "eid": 365,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\diasymreader.dll",
          "pathtofile": null,
          "moduleaddress": "0x70e40000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,563",
        "eid": 366,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:34,641",
        "eid": 367,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:34,641",
        "eid": 368,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:34,641",
        "eid": 369,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:34,766",
        "eid": 370,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:34,782",
        "eid": 371,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,829",
        "eid": 372,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:34,829",
        "eid": 373,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\\InprocServer32\\(Default)",
          "content": "C:\\Windows\\SysWOW64\\mscoree.dll"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,829",
        "eid": 374,
        "data": {
          "file": "C:\\Windows\\SysWOW64\\mscoree.dll",
          "pathtofile": null,
          "moduleaddress": "0x74160000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:34,829",
        "eid": 375,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:34,907",
        "eid": 376,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:34,907",
        "eid": 377,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe"
        }
      },
      {
        "event": "delete",
        "object": "file",
        "timestamp": "2026-04-25 06:56:35,157",
        "eid": 378,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe:Zone.Identifier"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,297",
        "eid": 379,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,297",
        "eid": 380,
        "data": {
          "file": "ntdll.dll",
          "pathtofile": null,
          "moduleaddress": "0x77e40000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,297",
        "eid": 381,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,297",
        "eid": 382,
        "data": {
          "file": "ntdll.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,329",
        "eid": 383,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,376",
        "eid": 384,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,797",
        "eid": 385,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:35,860",
        "eid": 386,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "create",
        "object": "dir",
        "timestamp": "2026-04-25 06:56:36,016",
        "eid": 387,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs"
        }
      },
      {
        "event": "create",
        "object": "dir",
        "timestamp": "2026-04-25 06:56:36,016",
        "eid": 388,
        "data": {
          "file": "C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\Logs\\cape"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:36,016",
        "eid": 389,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:36,110",
        "eid": 390,
        "data": {
          "file": "kernel32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:36,829",
        "eid": 391,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\psapi.dll",
          "pathtofile": null,
          "moduleaddress": "0x00000000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:36,829",
        "eid": 392,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:36,860",
        "eid": 393,
        "data": {
          "file": "psapi.dll",
          "pathtofile": null,
          "moduleaddress": "0x76a70000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:36,860",
        "eid": 394,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:37,063",
        "eid": 395,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:37,110",
        "eid": 396,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\ntdll.dll",
          "pathtofile": null,
          "moduleaddress": "0x00000000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:37,110",
        "eid": 397,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:37,110",
        "eid": 398,
        "data": {
          "file": "ntdll.dll",
          "pathtofile": null,
          "moduleaddress": "0x77e40000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:37,110",
        "eid": 399,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:37,766",
        "eid": 400,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows NT\\CurrentVersion\\InstallationType",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:37,766",
        "eid": 401,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows NT\\CurrentVersion\\InstallationType",
          "content": "Client"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:37,938",
        "eid": 402,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll",
          "pathtofile": null,
          "moduleaddress": "0x08220000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:37,938",
        "eid": 403,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 404,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\DisplayName",
          "content": "System.Xml,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 405,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigMask",
          "content": "4361"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 406,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ConfigString",
          "content": ""
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 407,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MVID",
          "content": "\\xba\\xe2N\\x9b\\xcb\\xc0\\x1b\\xb2\\xa0\\xedO\\xa7Q4pA"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 408,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\EvalationData",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 409,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\Status",
          "content": "0"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 410,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\ILDependencies",
          "content": "\\xd8\\xd4KB\\xd5\\x04\\xc5\\x0c\\x06\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xee\\x8fcu';Y\\x11\\x05\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00W\\x8d\\xab\\x19t&\\xa3.\\x07\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 411,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\NIDependencies",
          "content": "\\xc68\\x19\\x18\\xc5\\xe2Py\\x01\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00O|\\xbc0O\\xfeP?\\x08\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 412,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\NI\\6faf58\\19ab8d57\\7\\MissingDependencies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 413,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\DisplayName",
          "content": "System.Data.SqlXml,2.0.0.0,,b77a5c561934e089"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 414,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Status",
          "content": "4098"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 415,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\Modules",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 416,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\SIG",
          "content": "9S\\x1e/K\\x98DN\\xa1\\xa3^\\xba\\xd8\\xae\\xa3M\\x85\\x11\\x9b\\x17\\x815z^\\x15:\\xb8\\xb7\\x13\\x01\\xd4)\\xebl\\xb1\\x90"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 417,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\NativeImagesIndex\\v2.0.50727_32\\IL\\75638fee\\11593b27\\5\\LastModTime",
          "content": "\\x00\\xe8\\xdd\\xc5;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:38,235",
        "eid": 418,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Fusion\\GACChangeNotification\\Default\\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL",
          "content": "\\x00\\xe8\\xdd\\xc5;\\xac\\xd5\\x01"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:38,719",
        "eid": 419,
        "data": {
          "file": "C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\bae24e9bcbc01bb2a0ed4fa751347041\\System.Xml.ni.dll",
          "pathtofile": null,
          "moduleaddress": "0x708c0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:38,719",
        "eid": 420,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:38,735",
        "eid": 421,
        "data": {
          "file": "MSCORWKS.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:38,735",
        "eid": 422,
        "data": {
          "file": "mscorjit.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:49,422",
        "eid": 423,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:49,469",
        "eid": 424,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:49,469",
        "eid": 425,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:49,469",
        "eid": 426,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:49,516",
        "eid": 427,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:49,907",
        "eid": 428,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:49,938",
        "eid": 429,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "read",
        "object": "file",
        "timestamp": "2026-04-25 06:56:50,001",
        "eid": 430,
        "data": {
          "file": "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,079",
        "eid": 431,
        "data": {
          "file": "mscoree.dll",
          "pathtofile": null,
          "moduleaddress": "0x74160000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,079",
        "eid": 432,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,407",
        "eid": 433,
        "data": {
          "file": "C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\ws2_32.dll",
          "pathtofile": null,
          "moduleaddress": "0x00000000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,407",
        "eid": 434,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,407",
        "eid": 435,
        "data": {
          "file": "ws2_32.dll",
          "pathtofile": null,
          "moduleaddress": "0x76640000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,407",
        "eid": 436,
        "data": {
          "file": null,
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:50,532",
        "eid": 437,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,844",
        "eid": 438,
        "data": {
          "file": "C:\\Windows\\System32\\mswsock.dll",
          "pathtofile": null,
          "moduleaddress": "0x747c0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:50,844",
        "eid": 439,
        "data": {
          "file": "C:\\Windows\\System32\\mswsock.dll",
          "pathtofile": null,
          "moduleaddress": "0x747c0000"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 440,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Library",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 441,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Library",
          "content": "%systemroot%\\system32\\netfxperf.dll"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 442,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\IsMultiInstance",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 443,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\IsMultiInstance",
          "content": "1"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 444,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\First Counter",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 445,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\First Counter",
          "content": "6828"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 446,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\CategoryOptions",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 447,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\CategoryOptions",
          "content": "3"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 448,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\FileMappingSize",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 449,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\FileMappingSize",
          "content": "131072"
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 450,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Counter Names",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:56:51,313",
        "eid": 451,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\.NET CLR Networking\\Performance\\Counter Names",
          "content": "C\\x00o\\x00n\\x00n\\x00e\\x00c\\x00t\\x00i\\x00o\\x00n\\x00s\\x00 \\x00E\\x00s\\x00t\\x00a\\x00b\\x00l\\x00i\\x00s\\x00h\\x00e\\x00d\\x00\\x00\\x00B\\x00y\\x00t\\x00e\\x00s\\x00 \\x00R\\x00e\\x00c\\x00e\\x00i\\x00v\\x00e\\x00d\\x00\\x00\\x00B\\x00y\\x00t\\x00e\\x00s\\x00 \\x00S\\x00e\\x00n\\x00t\\x00\\x00\\x00D\\x00a\\x00t\\x00a\\x00g\\x00r\\x00a\\x00m\\x00s\\x00 \\x00R\\x00e\\x00c\\x00e\\x00i\\x00v\\x00e\\x00d\\x00\\x00\\x00D\\x00a\\x00t\\x00a\\x00g\\x00r\\x00a\\x00m\\x00s\\x00 \\x00S\\x00e\\x00n\\x00t\\x00\\x00\\x00\\x00\\x00"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:51,626",
        "eid": 452,
        "data": {
          "file": "C:\\Windows\\System32\\mswsock.dll",
          "pathtofile": null,
          "moduleaddress": "0x747c0000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:51,657",
        "eid": 453,
        "data": {
          "file": "C:\\Windows\\System32\\rasadhlp.dll",
          "pathtofile": null,
          "moduleaddress": "0x73e70000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:52,751",
        "eid": 454,
        "data": {
          "file": "C:\\Windows\\System32\\FWPUCLNT.DLL",
          "pathtofile": null,
          "moduleaddress": "0x71570000"
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:56:53,735",
        "eid": 455,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:02,079",
        "eid": 456,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:06,719",
        "eid": 457,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:06,719",
        "eid": 458,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:10,376",
        "eid": 459,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:57:23,219",
        "eid": 460,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
          "content": null
        }
      },
      {
        "event": "read",
        "object": "registry",
        "timestamp": "2026-04-25 06:57:23,219",
        "eid": 461,
        "data": {
          "regkey": "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Session Manager\\ResourcePolicies",
          "content": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:23,219",
        "eid": 462,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:25,329",
        "eid": 463,
        "data": {
          "file": "oleaut32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:25,329",
        "eid": 464,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:26,610",
        "eid": 465,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:41,594",
        "eid": 466,
        "data": {
          "file": "oleaut32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:41,594",
        "eid": 467,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:42,829",
        "eid": 468,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:57,844",
        "eid": 469,
        "data": {
          "file": "oleaut32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:57,844",
        "eid": 470,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:57:59,157",
        "eid": 471,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:14,141",
        "eid": 472,
        "data": {
          "file": "oleaut32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:14,141",
        "eid": 473,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:19,719",
        "eid": 474,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:34,735",
        "eid": 475,
        "data": {
          "file": "oleaut32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:34,735",
        "eid": 476,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:40,047",
        "eid": 477,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:50,704",
        "eid": 478,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:50,704",
        "eid": 479,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:58:55,032",
        "eid": 480,
        "data": {
          "file": "oleaut32.dll",
          "pathtofile": null,
          "moduleaddress": null
        }
      },
      {
        "event": "load",
        "object": "library",
        "timestamp": "2026-04-25 06:59:00,360",
        "eid": 481,
        "data": {
          "file": "KERNEL32.DLL",
          "pathtofile": null,
          "moduleaddress": null
        }
      }
    ],
    "encryptedbuffers": [
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\xc2\\xceg,\\x1b<*\\xae%\\x82\\xd3g+X\\xe4C",
        "crypt_key": "0x00c61df8"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\\x0e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\\x1b+\\xaa\\xb8\\x0c\\x15\\x9c\\xdb\\x1a\\xe4\\xd9\\xe4w\\x8b\\xc6*%\\xf5\\xf3NW\\xfb\\xf8j\\xdc\\x00\\x00\\x00",
        "crypt_key": "0x00c61c78"
      },
      {
        "process_name": "91d880890f6e481edcbe.exe",
        "pid": 6484,
        "api_call": "CryptEncrypt",
        "buffer": "\\x94\\x88\\xfa\\xbe\\xa1\\xaf[mN\\x8d\\x12\\xe9\\x806\\xe1\\xe3",
        "crypt_key": "0x00c61c78"
      }
    ],
    "network_map": {
      "endpoint_map": {},
      "http_host_map": {},
      "dns_intents": {},
      "http_requests": [],
      "winhttp_sessions": []
    }
  },
  "debug": {
    "log": "2026-03-05 20:34:38,257 [root] INFO: Date set to: 20260425T09:55:11, timeout set to: 200\n2026-04-25 09:55:11,125 [root] DEBUG: Starting analyzer from: C:\\r4q0i2l_\n2026-04-25 09:55:11,156 [root] DEBUG: Storing results at: C:\\pFgSGb\n2026-04-25 09:55:11,172 [root] DEBUG: Pipe server name: \\\\.\\PIPE\\iRkbqMIcVR\n2026-04-25 09:55:11,187 [root] DEBUG: Python path: C:\\Python310\n2026-04-25 09:55:11,281 [root] INFO: analysis running as an admin\n2026-04-25 09:55:11,297 [root] INFO: analysis package specified: \"exe\"\n2026-04-25 09:55:11,297 [root] DEBUG: importing analysis package module: \"modules.packages.exe\"...\n2026-04-25 09:55:11,359 [root] DEBUG: imported analysis package \"exe\"\n2026-04-25 09:55:11,391 [root] DEBUG: initializing analysis package \"exe\"...\n2026-04-25 09:55:11,391 [lib.common.common] INFO: wrapping\n2026-04-25 09:55:11,391 [lib.core.compound] INFO: C:\\Users\\cape\\AppData\\Local\\Temp already exists, skipping creation\n2026-04-25 09:55:11,391 [root] DEBUG: New location of moved file: C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe\n2026-04-25 09:55:11,391 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option\n2026-04-25 09:55:11,391 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option\n2026-04-25 09:55:11,391 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option\n2026-04-25 09:55:11,391 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option\n2026-04-25 09:55:11,469 [root] DEBUG: Imported auxiliary module \"modules.auxiliary.browser\"\n2026-04-25 09:55:11,547 [root] DEBUG: Imported auxiliary module \"modules.auxiliary.digisig\"\n2026-04-25 09:55:11,562 [root] DEBUG: Imported auxiliary module \"modules.auxiliary.disguise\"\n2026-04-25 09:55:11,578 [root] DEBUG: Imported auxiliary module \"modules.auxiliary.human\"\n2026-04-25 09:55:11,687 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops'\n2026-04-25 09:55:11,891 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageGrab'\n2026-04-25 09:55:11,953 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageDraw'\n2026-04-25 09:55:12,875 [lib.api.screenshot] INFO: Please upgrade Pillow to >= 5.4.1 for best performance\n2026-04-25 09:55:12,891 [root] DEBUG: Imported auxiliary module \"modules.auxiliary.screenshots\"\n2026-04-25 09:55:12,891 [root] DEBUG: Imported auxiliary module \"modules.auxiliary.tlsdump\"\n2026-04-25 09:55:12,891 [root] DEBUG: Initialized auxiliary module \"Browser\"\n2026-04-25 09:55:12,891 [root] DEBUG: attempting to configure 'Browser' from data\n2026-04-25 09:55:12,906 [root] DEBUG: module Browser does not support data configuration, ignoring\n2026-04-25 09:55:12,906 [root] DEBUG: Trying to start auxiliary module \"modules.auxiliary.browser\"...\n2026-04-25 09:55:12,906 [root] DEBUG: Started auxiliary module modules.auxiliary.browser\n2026-04-25 09:55:12,906 [root] DEBUG: Initialized auxiliary module \"DigiSig\"\n2026-04-25 09:55:12,906 [root] DEBUG: attempting to configure 'DigiSig' from data\n2026-04-25 09:55:12,906 [root] DEBUG: module DigiSig does not support data configuration, ignoring\n2026-04-25 09:55:12,922 [root] DEBUG: Trying to start auxiliary module \"modules.auxiliary.digisig\"...\n2026-04-25 09:55:12,922 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature\n2026-04-25 09:55:39,172 [modules.auxiliary.digisig] DEBUG: File is not signed\n2026-04-25 09:55:39,187 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json\n2026-04-25 09:55:39,203 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig\n2026-04-25 09:55:39,219 [root] DEBUG: Initialized auxiliary module \"Disguise\"\n2026-04-25 09:55:39,219 [root] DEBUG: attempting to configure 'Disguise' from data\n2026-04-25 09:55:39,219 [root] DEBUG: module Disguise does not support data configuration, ignoring\n2026-04-25 09:55:39,219 [root] DEBUG: Trying to start auxiliary module \"modules.auxiliary.disguise\"...\n2026-04-25 09:55:39,344 [modules.auxiliary.disguise] INFO: Disguising GUID to 339d92a4-c255-4420-97b0-5631bd58867a\n2026-04-25 09:55:39,359 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise\n2026-04-25 09:55:39,375 [root] DEBUG: Initialized auxiliary module \"Human\"\n2026-04-25 09:55:39,375 [root] DEBUG: attempting to configure 'Human' from data\n2026-04-25 09:55:39,375 [root] DEBUG: module Human does not support data configuration, ignoring\n2026-04-25 09:55:39,375 [root] DEBUG: Trying to start auxiliary module \"modules.auxiliary.human\"...\n2026-04-25 09:55:39,391 [root] DEBUG: Started auxiliary module modules.auxiliary.human\n2026-04-25 09:55:39,391 [root] DEBUG: Initialized auxiliary module \"Screenshots\"\n2026-04-25 09:55:39,391 [root] DEBUG: attempting to configure 'Screenshots' from data\n2026-04-25 09:55:39,391 [root] DEBUG: module Screenshots does not support data configuration, ignoring\n2026-04-25 09:55:39,391 [root] DEBUG: Trying to start auxiliary module \"modules.auxiliary.screenshots\"...\n2026-04-25 09:55:39,437 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots\n2026-04-25 09:55:39,500 [root] DEBUG: Initialized auxiliary module \"TLSDumpMasterSecrets\"\n2026-04-25 09:55:39,500 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data\n2026-04-25 09:55:39,516 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring\n2026-04-25 09:55:39,516 [root] DEBUG: Trying to start auxiliary module \"modules.auxiliary.tlsdump\"...\n2026-04-25 09:55:39,516 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 644\n2026-04-25 09:55:39,750 [lib.api.process] INFO: Monitor config for <Process 644 lsass.exe>: C:\\r4q0i2l_\\dll\\644.ini\n2026-04-25 09:55:39,766 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor\n2026-04-25 09:55:39,859 [lib.api.process] INFO: 64-bit DLL to inject is C:\\r4q0i2l_\\dll\\agsEkyC.dll, loader C:\\r4q0i2l_\\bin\\HLnLkMTh.exe\n2026-04-25 09:55:40,047 [root] DEBUG: Loader: Injecting process 644 with C:\\r4q0i2l_\\dll\\agsEkyC.dll.\n2026-04-25 09:55:40,922 [root] DEBUG: 644: Python path set to 'C:\\Python310'.\n2026-04-25 09:55:40,937 [root] DEBUG: 644: Disabling sleep skipping.\n2026-04-25 09:55:40,937 [root] DEBUG: 644: TLS secret dump mode enabled.\n2026-04-25 09:55:41,187 [root] DEBUG: 644: RtlInsertInvertedFunctionTable 0x00007FFEFE86090E, LdrpInvertedFunctionTableSRWLock 0x00007FFEFE9BD500\n2026-04-25 09:55:41,203 [root] DEBUG: 644: Monitor initialised: 64-bit capemon loaded in process 644 at 0x00007FFEABAE0000, thread 7752, image base 0x00007FF7C23E0000, stack from 0x0000008E4CBF2000-0x0000008E4CC00000\n2026-04-25 09:55:41,203 [root] DEBUG: 644: Commandline: C:\\Windows\\system32\\lsass.exe\n2026-04-25 09:55:41,391 [root] DEBUG: 644: Hooked 5 out of 5 functions\n2026-04-25 09:55:41,406 [root] DEBUG: 644: TLS 1.2 secrets logged to: C:\\pFgSGb\\tlsdump\\tlsdump.log\n2026-04-25 09:55:41,422 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.\n2026-04-25 09:55:41,422 [root] DEBUG: Successfully injected DLL C:\\r4q0i2l_\\dll\\agsEkyC.dll.\n2026-04-25 09:55:41,437 [lib.api.process] INFO: Injected into 64-bit <Process 644 lsass.exe>\n2026-04-25 09:55:41,437 [root] DEBUG: Started auxiliary module modules.auxiliary.tlsdump\n2026-04-25 09:55:50,187 [root] INFO: Restarting WMI Service\n2026-04-25 09:55:50,251 [root] DEBUG: package modules.packages.exe does not support configure, ignoring\n2026-04-25 09:55:50,251 [root] WARNING: configuration error for package modules.packages.exe: error importing data.packages.exe: No module named 'data.packages'\n2026-04-25 09:55:50,251 [lib.core.compound] INFO: C:\\Users\\cape\\AppData\\Local\\Temp already exists, skipping creation\n2026-04-25 09:55:50,391 [lib.api.process] INFO: Successfully executed process from path \"C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe\" with arguments \"\" with pid 6484\n2026-04-25 09:55:50,391 [lib.api.process] INFO: Monitor config for <Process 6484 91d880890f6e481edcbe.exe>: C:\\r4q0i2l_\\dll\\6484.ini\n2026-04-25 09:55:50,578 [lib.api.process] INFO: 32-bit DLL to inject is C:\\r4q0i2l_\\dll\\hizPnd.dll, loader C:\\r4q0i2l_\\bin\\fyLUmkl.exe\n2026-04-25 09:55:50,781 [root] DEBUG: Loader: Injecting process 6484 (thread 6504) with C:\\r4q0i2l_\\dll\\hizPnd.dll.\n2026-04-25 09:55:50,797 [root] DEBUG: InjectDllViaIAT: Executable is .NET, injecting via queued APC.\n2026-04-25 09:55:50,797 [root] DEBUG: InjectDllViaQueuedAPC: APC injection queued.\n2026-04-25 09:55:50,797 [root] DEBUG: Successfully injected DLL C:\\r4q0i2l_\\dll\\hizPnd.dll.\n2026-04-25 09:55:50,797 [lib.api.process] INFO: Injected into 32-bit <Process 6484 91d880890f6e481edcbe.exe>\n2026-04-25 09:55:52,812 [lib.api.process] INFO: Successfully resumed <Process 6484 91d880890f6e481edcbe.exe>\n2026-04-25 09:55:54,484 [root] DEBUG: 6484: Python path set to 'C:\\Python310'.\n2026-04-25 09:55:54,516 [root] DEBUG: 6484: Disabling sleep skipping.\n2026-04-25 09:55:54,516 [root] DEBUG: 6484: Dropped file limit defaulting to 100.\n2026-04-25 09:55:54,547 [root] DEBUG: 6484: YaraInit: Compiled 44 rule files\n2026-04-25 09:55:54,562 [root] DEBUG: 6484: YaraInit: Compiled rules saved to file C:\\r4q0i2l_\\data\\yara\\capemon.yac\n2026-04-25 09:55:54,562 [root] DEBUG: 6484: YaraScan: Scanning 0x00590000, size 0x1f0\n2026-04-25 09:55:54,562 [root] DEBUG: 6484: Monitor initialised: 32-bit capemon loaded in process 6484 at 0x73ea0000, thread 6504, image base 0x590000, stack from 0x952000-0x960000\n2026-04-25 09:55:54,562 [root] DEBUG: 6484: Commandline: \"C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe\"\n2026-04-25 09:55:55,687 [root] DEBUG: 6484: Yara error: Scanning timed out\n2026-04-25 09:55:56,781 [root] DEBUG: 6484: Yara error: Scanning timed out\n2026-04-25 09:55:56,797 [root] DEBUG: 6484: hook_api: Warning - SetWindowLongW export address 0x75D45420 differs from GetProcAddress -> 0x750E59E0 (apphelp.dll::0xff3d59e0)\n2026-04-25 09:55:56,797 [root] DEBUG: 6484: hook_api: Warning - EnumDisplayDevicesA export address 0x75D395A0 differs from GetProcAddress -> 0x750E6780 (apphelp.dll::0xff3d6780)\n2026-04-25 09:55:56,797 [root] DEBUG: 6484: hook_api: Warning - EnumDisplayDevicesW export address 0x75D4FB70 differs from GetProcAddress -> 0x7510E4D0 (apphelp.dll::0xff3fe4d0)\n2026-04-25 09:55:57,109 [root] WARNING: b'Unable to place hook on GetCommandLineA'\n2026-04-25 09:55:57,109 [root] DEBUG: 6484: set_hooks: Unable to hook GetCommandLineA\n2026-04-25 09:55:57,109 [root] WARNING: b'Unable to place hook on GetCommandLineW'\n2026-04-25 09:55:57,125 [root] DEBUG: 6484: set_hooks: Unable to hook GetCommandLineW\n2026-04-25 09:55:57,469 [root] DEBUG: 6484: Hooked 630 out of 632 functions\n2026-04-25 09:55:57,719 [root] DEBUG: 6484: Syscall hook installed, syscall logging level 1\n2026-04-25 09:55:57,735 [root] INFO: Loaded monitor into process with pid 6484\n2026-04-25 09:55:58,547 [root] DEBUG: 6484: DLL loaded at 0x73DB0000: C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei (0x8d000 bytes).\n2026-04-25 09:55:59,375 [root] DEBUG: 6484: set_hooks_by_export_directory: Hooked 0 out of 632 functions\n2026-04-25 09:55:59,375 [root] DEBUG: 6484: DLL loaded at 0x75250000: C:\\Windows\\SYSTEM32\\kernel.appcore (0xf000 bytes).\n2026-04-25 09:55:59,391 [root] DEBUG: 6484: DLL loaded at 0x75460000: C:\\Windows\\SYSTEM32\\VERSION (0x8000 bytes).\n2026-04-25 09:56:03,547 [root] DEBUG: 6484: InstrumentationCallback: Added region at 0x76AD24AC (base 0x76AB0000) to tracked regions list (thread 6504).\n2026-04-25 09:56:03,547 [root] DEBUG: 6484: ProcessTrackedRegion: Region at 0x76AB0000 mapped as \\Device\\HarddiskVolume1\\Windows\\SysWOW64\\kernel32.dll is in known range, skipping\n2026-04-25 09:56:04,281 [root] DEBUG: 6484: DLL loaded at 0x736E0000: C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\\MSVCR80 (0x9b000 bytes).\n2026-04-25 09:56:04,547 [root] DEBUG: 6484: set_hooks_by_export_directory: Hooked 0 out of 632 functions\n2026-04-25 09:56:04,547 [root] DEBUG: 6484: DLL loaded at 0x73780000: C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks (0x621000 bytes).\n2026-04-25 09:56:10,875 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x0288A000, size: 0x1000.\n2026-04-25 09:56:10,891 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x02880000\n2026-04-25 09:56:10,891 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:10,891 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02880000.\n2026-04-25 09:56:10,953 [root] DEBUG: 6484: DLL loaded at 0x77590000: C:\\Windows\\System32\\shell32 (0x5b5000 bytes).\n2026-04-25 09:56:10,985 [root] DEBUG: 6484: DLL loaded at 0x756D0000: C:\\Windows\\SYSTEM32\\Wldp (0x27000 bytes).\n2026-04-25 09:56:10,985 [root] DEBUG: 6484: DLL loaded at 0x75700000: C:\\Windows\\SYSTEM32\\windows.storage (0x60d000 bytes).\n2026-04-25 09:56:11,000 [root] DEBUG: 6484: DLL loaded at 0x76F70000: C:\\Windows\\System32\\SHCORE (0x87000 bytes).\n2026-04-25 09:56:13,094 [root] DEBUG: 6484: InstrumentationCallback: Added region at 0x772833EC (base 0x77150000) to tracked regions list (thread 6504).\n2026-04-25 09:56:13,110 [root] DEBUG: 6484: ProcessTrackedRegion: Region at 0x77150000 mapped as \\Device\\HarddiskVolume1\\Windows\\SysWOW64\\KernelBase.dll is in known range, skipping\n2026-04-25 09:56:13,110 [root] DEBUG: 6484: DLL loaded at 0x75260000: C:\\Windows\\SYSTEM32\\profapi (0x18000 bytes).\n2026-04-25 09:56:17,875 [root] DEBUG: 6484: DLL loaded at 0x72BE0000: C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\07fedecf3b964c4d26a6ec994226efe4\\mscorlib.ni (0xb00000 bytes).\n2026-04-25 09:56:20,328 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x02892000, size: 0x1000.\n2026-04-25 09:56:20,344 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x02890000\n2026-04-25 09:56:20,344 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:21,297 [root] DEBUG: 6484: DLL loaded at 0x76D80000: C:\\Windows\\System32\\bcryptPrimitives (0x5f000 bytes).\n2026-04-25 09:56:21,313 [root] DEBUG: 6484: DLL loaded at 0x745D0000: C:\\Windows\\system32\\uxtheme (0x74000 bytes).\n2026-04-25 09:56:24,172 [root] DEBUG: 6484: caller_dispatch: Added region at 0x04FE0000 to tracked regions list (kernel32::SetErrorMode returns to 0x04FE0626, thread 6504).\n2026-04-25 09:56:24,188 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x04FE0000 - 0x04FE0FFE.\n2026-04-25 09:56:24,188 [root] DEBUG: 6484: ScanForDisguisedPE: No PE image located in range 0x04FE0000-0x04FE0FFE.\n2026-04-25 09:56:24,688 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_45377012456625642026 to CAPE\\a421fa5d14332f486ba5b5d74499679aab17e99d022e25d0384d0917a615fcc3; Size is 4094; Max size: 100000000\n2026-04-25 09:56:24,688 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_45377012456625642026 (size 4094 bytes)\n2026-04-25 09:56:24,688 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x04FE0000, size 4096 bytes.\n2026-04-25 09:56:24,703 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x04FE0000.\n2026-04-25 09:56:24,703 [root] DEBUG: 6484: YaraScan: Scanning 0x04FE0000, size 0xffe\n2026-04-25 09:56:24,703 [root] DEBUG: 6484: ReverseScanForNonZero: Error - Supplied size zero.\n2026-04-25 09:56:24,719 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_141028832456625642026 to CAPE\\e80dcbee37f3881c3405857c3eb3c0bc117b40c7acb794ebf6c8083d8840eab7; Size is 354; Max size: 100000000\n2026-04-25 09:56:24,719 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_141028832456625642026 (size 354 bytes)\n2026-04-25 09:56:24,735 [root] DEBUG: 6484: DumpRegion: Dumped region at 0x0288A000, size 4096 bytes.\n2026-04-25 09:56:24,735 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x0288A000.\n2026-04-25 09:56:24,735 [root] DEBUG: 6484: ReverseScanForNonZero: Error - Supplied address inaccessible: 0x02880FFF\n2026-04-25 09:56:24,751 [root] DEBUG: 6484: YaraScan: Nothing to scan at 0x0288A000!\n2026-04-25 09:56:26,235 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:26,453 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x03FEB000, size: 0x1000.\n2026-04-25 09:56:26,453 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x03FE0000\n2026-04-25 09:56:26,453 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:26,469 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x03FE0000.\n2026-04-25 09:56:27,891 [root] DEBUG: 6484: DLL loaded at 0x72430000: C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\c60dd1ee843ba8ff9ee7edcd6302393b\\System.ni (0x7a8000 bytes).\n2026-04-25 09:56:28,235 [root] DEBUG: 6484: DLL loaded at 0x722A0000: C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\a03dd8871929955c680232682c9464a0\\System.Drawing.ni (0x189000 bytes).\n2026-04-25 09:56:28,360 [root] DEBUG: 6484: DLL loaded at 0x716C0000: C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\194e1e92bfae5396086518c2ec0a0f74\\System.Windows.Forms.ni (0xbe0000 bytes).\n2026-04-25 09:56:28,688 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:28,735 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:28,766 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:28,766 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:28,828 [root] DEBUG: 6484: ProcessTrackedRegion: Region at 0x76AB0000 mapped as \\Device\\HarddiskVolume1\\Windows\\SysWOW64\\kernel32.dll is in known range, skipping\n2026-04-25 09:56:28,875 [root] DEBUG: 6484: DLL loaded at 0x71660000: C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit (0x5b000 bytes).\n2026-04-25 09:56:29,078 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:29,110 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x05070000, size: 0x1000.\n2026-04-25 09:56:29,110 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:29,344 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:29,441 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x05070000 - 0x05070564.\n2026-04-25 09:56:29,453 [root] DEBUG: 6484: ScanForDisguisedPE: Size too small: 0x564 bytes\n2026-04-25 09:56:29,453 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_90156062956625642026 to CAPE\\ad377bc1882345987f8d7f32117df03e8918144a6039f0a89ded1742ba15df70; Size is 1380; Max size: 100000000\n2026-04-25 09:56:29,485 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_90156062956625642026 (size 1380 bytes)\n2026-04-25 09:56:29,485 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x05070000, size 4096 bytes.\n2026-04-25 09:56:29,485 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x05070000.\n2026-04-25 09:56:29,500 [root] DEBUG: 6484: YaraScan: Scanning 0x05070000, size 0x564\n2026-04-25 09:56:29,500 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x7F350000, size: 0x50000.\n2026-04-25 09:56:29,516 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x7F350000\n2026-04-25 09:56:29,516 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:29,516 [root] DEBUG: 6484: AllocationHandler: Processing previous tracked region at: 0x05070000.\n2026-04-25 09:56:29,516 [root] DEBUG: 6484: ProcessTrackedRegion: Updated entropy for tracked region at 0x05070000: 2.794909e+00 (from 0.000000e+00)\n2026-04-25 09:56:29,610 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x05070000 - 0x05070564.\n2026-04-25 09:56:29,625 [root] DEBUG: 6484: ScanForDisguisedPE: Size too small: 0x564 bytes\n2026-04-25 09:56:29,673 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_106796802956625642026 to CAPE\\ad377bc1882345987f8d7f32117df03e8918144a6039f0a89ded1742ba15df70; Size is 1380; Max size: 100000000\n2026-04-25 09:56:29,703 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_106796802956625642026 (size 1380 bytes)\n2026-04-25 09:56:29,703 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x05070000, size 4096 bytes.\n2026-04-25 09:56:29,703 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x05070000.\n2026-04-25 09:56:29,703 [root] DEBUG: 6484: YaraScan: Scanning 0x05070000, size 0x564\n2026-04-25 09:56:29,719 [root] DEBUG: 6484: AllocationHandler: Memory region (size 0x50000) reserved but not committed at 0x7F350000.\n2026-04-25 09:56:29,719 [root] DEBUG: 6484: AllocationHandler: Previously reserved region at 0x7F350000, committing at: 0x7F350000.\n2026-04-25 09:56:29,719 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x7F350000.\n2026-04-25 09:56:29,735 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x7F340000, size: 0x10000.\n2026-04-25 09:56:29,735 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x7F340000\n2026-04-25 09:56:29,735 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:29,750 [root] DEBUG: 6484: AllocationHandler: Processing previous tracked region at: 0x7F350000.\n2026-04-25 09:56:29,750 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x7F350000 - 0x7F35002C.\n2026-04-25 09:56:29,750 [root] DEBUG: 6484: ScanForDisguisedPE: Size too small: 0x2c bytes\n2026-04-25 09:56:29,750 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_120270002956625642026 to CAPE\\064ec728231780bebf305dc752c6dbeca6cb311f53dec5a57657cd7d5a42f2a9; Size is 44; Max size: 100000000\n2026-04-25 09:56:29,769 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_120270002956625642026 (size 44 bytes)\n2026-04-25 09:56:29,769 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x7F350000, size 4096 bytes.\n2026-04-25 09:56:29,769 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x7F350000.\n2026-04-25 09:56:29,781 [root] DEBUG: 6484: YaraScan: Scanning 0x7F350000, size 0x2c\n2026-04-25 09:56:29,781 [root] DEBUG: 6484: AllocationHandler: Memory region (size 0x10000) reserved but not committed at 0x7F340000.\n2026-04-25 09:56:29,781 [root] DEBUG: 6484: AllocationHandler: Previously reserved region at 0x7F340000, committing at: 0x7F340000.\n2026-04-25 09:56:29,860 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x03FDA000, size: 0x1000.\n2026-04-25 09:56:30,172 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x03FCA000, size: 0x1000.\n2026-04-25 09:56:30,172 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x03FC0000\n2026-04-25 09:56:30,188 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:30,188 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x03FC0000.\n2026-04-25 09:56:30,297 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02880000.\n2026-04-25 09:56:30,391 [root] DEBUG: 6484: ProcessTrackedRegion: Region at 0x76AB0000 mapped as \\Device\\HarddiskVolume1\\Windows\\SysWOW64\\kernel32.dll is in known range, skipping\n2026-04-25 09:56:30,516 [root] DEBUG: 6484: DLL loaded at 0x76BA0000: C:\\Windows\\System32\\MSCTF (0xd4000 bytes).\n2026-04-25 09:56:30,985 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x03FC0000.\n2026-04-25 09:56:31,313 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:31,594 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:31,625 [root] DEBUG: 6484: DLL loaded at 0x75280000: C:\\Windows\\SYSTEM32\\CRYPTSP (0x13000 bytes).\n2026-04-25 09:56:31,641 [root] DEBUG: 6484: DLL loaded at 0x74C10000: C:\\Windows\\system32\\rsaenh (0x2f000 bytes).\n2026-04-25 09:56:31,641 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x07880000, size: 0x1000.\n2026-04-25 09:56:31,641 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:31,688 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:31,688 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x03FE0000.\n2026-04-25 09:56:31,797 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:31,891 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x07890000, size: 0x1000.\n2026-04-25 09:56:31,891 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:32,204 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x07A41000, size: 0x1000.\n2026-04-25 09:56:32,235 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07A40000.\n2026-04-25 09:56:32,250 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07A40000.\n2026-04-25 09:56:32,250 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07A40000.\n2026-04-25 09:56:32,266 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07A40000.\n2026-04-25 09:56:32,266 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x078A0000, size: 0x8000.\n2026-04-25 09:56:32,266 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x078A0000\n2026-04-25 09:56:32,281 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:32,281 [root] DEBUG: 6484: AllocationHandler: Processing previous tracked region at: 0x07A40000.\n2026-04-25 09:56:32,281 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x07A40000 - 0x07A47FFE.\n2026-04-25 09:56:32,281 [root] DEBUG: 6484: ScanForDisguisedPE: No PE image located in range 0x07A40000-0x07A47FFE.\n2026-04-25 09:56:32,298 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_79081833256625642026 to CAPE\\833716013580540b419235427cbc5a709845b35d92acea3efe9d77e038f00cf4; Size is 32766; Max size: 100000000\n2026-04-25 09:56:32,328 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_79081833256625642026 (size 32766 bytes)\n2026-04-25 09:56:32,328 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x07A40000, size 32768 bytes.\n2026-04-25 09:56:32,328 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x07A40000.\n2026-04-25 09:56:32,328 [root] DEBUG: 6484: YaraScan: Scanning 0x07A40000, size 0x7ffe\n2026-04-25 09:56:32,328 [root] DEBUG: 6484: AllocationHandler: Memory region (size 0x8000) reserved but not committed at 0x078A0000.\n2026-04-25 09:56:32,328 [root] DEBUG: 6484: AllocationHandler: Previously reserved region at 0x078A0000, committing at: 0x078A0000.\n2026-04-25 09:56:32,391 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07A40000.\n2026-04-25 09:56:32,391 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07A40000.\n2026-04-25 09:56:32,422 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:32,453 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:32,562 [root] DEBUG: 6484: ProcessTrackedRegion: Region at 0x77150000 mapped as \\Device\\HarddiskVolume1\\Windows\\SysWOW64\\KernelBase.dll is in known range, skipping\n2026-04-25 09:56:32,578 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x07880000 - 0x07880144.\n2026-04-25 09:56:32,578 [root] DEBUG: 6484: ScanForDisguisedPE: Size too small: 0x144 bytes\n2026-04-25 09:56:32,625 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_13270883256625642026 to CAPE\\a5e6546362978d31355aca9b0dcffe425cf729c012e66deb59eb7ae5bb8aef78; Size is 324; Max size: 100000000\n2026-04-25 09:56:32,641 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_13270883256625642026 (size 324 bytes)\n2026-04-25 09:56:32,641 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x07880000, size 4096 bytes.\n2026-04-25 09:56:32,641 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x07880000.\n2026-04-25 09:56:32,641 [root] DEBUG: 6484: YaraScan: Scanning 0x07880000, size 0x144\n2026-04-25 09:56:32,750 [root] DEBUG: 6484: DLL loaded at 0x70F00000: C:\\Windows\\SYSTEM32\\shfolder (0x6000 bytes).\n2026-04-25 09:56:32,875 [root] INFO: Added new file to list with pid 6484 and path C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat\n2026-04-25 09:56:32,875 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:32,891 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:32,953 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x03FD0000.\n2026-04-25 09:56:32,984 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x03FD0000.\n2026-04-25 09:56:33,203 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:33,469 [root] DEBUG: 6484: DLL loaded at 0x70ED0000: C:\\Windows\\SYSTEM32\\ntmarta (0x29000 bytes).\n2026-04-25 09:56:33,531 [root] INFO: Added new file to list with pid 6484 and path C:\\Program Files (x86)\\NAT Subsystem\\natss.exe\n2026-04-25 09:56:34,047 [root] DEBUG: 6484: ProcessTrackedRegion: Region at 0x76AB0000 mapped as \\Device\\HarddiskVolume1\\Windows\\SysWOW64\\kernel32.dll is in known range, skipping\n2026-04-25 09:56:34,078 [root] DEBUG: 6484: DLL loaded at 0x70EC0000: C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\culture (0x8000 bytes).\n2026-04-25 09:56:34,203 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02880000.\n2026-04-25 09:56:34,266 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:34,281 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x07AC0000, size: 0x100000.\n2026-04-25 09:56:34,281 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x07AC0000\n2026-04-25 09:56:34,281 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:34,281 [root] DEBUG: 6484: AllocationHandler: Processing previous tracked region at: 0x078A0000.\n2026-04-25 09:56:34,281 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x078A0000 - 0x078A08C9.\n2026-04-25 09:56:34,281 [root] DEBUG: 6484: ScanForDisguisedPE: No PE image located in range 0x078A0000-0x078A08C9.\n2026-04-25 09:56:34,297 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_51321843456625642026 to CAPE\\be7ca263a502af783d148e1e974f5ae0a964a2b73a4650bd31ff84b2f14c8601; Size is 2249; Max size: 100000000\n2026-04-25 09:56:34,297 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_51321843456625642026 (size 2249 bytes)\n2026-04-25 09:56:34,297 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x078A0000, size 4096 bytes.\n2026-04-25 09:56:34,297 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x078A0000.\n2026-04-25 09:56:34,297 [root] DEBUG: 6484: YaraScan: Scanning 0x078A0000, size 0x8c9\n2026-04-25 09:56:34,297 [root] DEBUG: 6484: AllocationHandler: Memory region (size 0x100000) reserved but not committed at 0x07AC0000.\n2026-04-25 09:56:34,312 [root] DEBUG: 6484: AllocationHandler: Previously reserved region at 0x07AC0000, committing at: 0x07AC0000.\n2026-04-25 09:56:34,500 [root] DEBUG: 6484: ProcessTrackedRegion: Region at 0x76AB0000 mapped as \\Device\\HarddiskVolume1\\Windows\\SysWOW64\\kernel32.dll is in known range, skipping\n2026-04-25 09:56:34,563 [root] DEBUG: 6484: DLL loaded at 0x70E40000: C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\diasymreader (0x8d000 bytes).\n2026-04-25 09:56:35,375 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:35,470 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:35,625 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:35,735 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:35,828 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:35,859 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:35,859 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:35,875 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:35,875 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:35,891 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:35,891 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07AC0000.\n2026-04-25 09:56:35,906 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07AC0000.\n2026-04-25 09:56:35,906 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07AC0000.\n2026-04-25 09:56:35,922 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:35,984 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:36,000 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:36,031 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07880000.\n2026-04-25 09:56:36,047 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:36,047 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:36,062 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:36,844 [root] DEBUG: 6484: DLL loaded at 0x76A70000: C:\\Windows\\System32\\psapi (0x6000 bytes).\n2026-04-25 09:56:37,391 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:37,922 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:37,953 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:38,016 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x05070000.\n2026-04-25 09:56:38,047 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:38,047 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x02890000.\n2026-04-25 09:56:38,062 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:38,062 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:38,078 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07890000.\n2026-04-25 09:56:38,141 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x08360000, size: 0x1000.\n2026-04-25 09:56:38,156 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:38,156 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:38,172 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x08300000, size: 0x1000.\n2026-04-25 09:56:38,187 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:38,219 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:38,641 [root] DEBUG: 6484: DLL loaded at 0x708C0000: C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\bae24e9bcbc01bb2a0ed4fa751347041\\System.Xml.ni (0x53c000 bytes).\n2026-04-25 09:56:40,047 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:40,047 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x08360000 - 0x083636D1.\n2026-04-25 09:56:40,047 [root] DEBUG: 6484: ScanForDisguisedPE: No PE image located in range 0x08360000-0x083636D1.\n2026-04-25 09:56:40,125 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_19274056625642026 to CAPE\\c6f4ddc492dbb4b5ee073e68b4cbb26e22867c064e45555f3f866adf987475d7; Size is 14033; Max size: 100000000\n2026-04-25 09:56:40,125 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_19274056625642026 (size 14033 bytes)\n2026-04-25 09:56:40,125 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x08360000, size 16384 bytes.\n2026-04-25 09:56:40,141 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x08360000.\n2026-04-25 09:56:40,141 [root] DEBUG: 6484: YaraScan: Scanning 0x08360000, size 0x36d1\n2026-04-25 09:56:40,156 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08300000.\n2026-04-25 09:56:40,437 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:49,453 [root] DEBUG: 6484: AllocationHandler: Previously reserved region at 0x04FE0000, committing at: 0x04FE1000.\n2026-04-25 09:56:49,687 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:49,953 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:49,969 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:49,984 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08300000.\n2026-04-25 09:56:49,984 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:50,063 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:50,095 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x08320000, size: 0x1000.\n2026-04-25 09:56:50,109 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:50,125 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08300000.\n2026-04-25 09:56:50,140 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:50,187 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:50,203 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08300000.\n2026-04-25 09:56:50,219 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:50,234 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:50,469 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x04FE0000.\n2026-04-25 09:56:50,515 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x04FE0000.\n2026-04-25 09:56:50,547 [root] DEBUG: 6484: AllocationHandler: Adding allocation to tracked region list: 0x08340000, size: 0x8000.\n2026-04-25 09:56:50,609 [root] DEBUG: 6484: GetEntropy: Error - Supplied address inaccessible: 0x08340000\n2026-04-25 09:56:50,656 [root] DEBUG: 6484: AddTrackedRegion: GetEntropy failed.\n2026-04-25 09:56:50,687 [root] DEBUG: 6484: AllocationHandler: Processing previous tracked region at: 0x08320000.\n2026-04-25 09:56:50,750 [root] DEBUG: 6484: DumpRegion: Dump at 0x08320000 skipped due to dump limit 10\n2026-04-25 09:56:50,781 [root] DEBUG: 6484: ProcessTrackedRegion: Failed to dump region at 0x08320000.\n2026-04-25 09:56:50,812 [root] DEBUG: 6484: YaraScan: Scanning 0x08320000, size 0x784\n2026-04-25 09:56:50,828 [root] DEBUG: 6484: AllocationHandler: Memory region (size 0x8000) reserved but not committed at 0x08340000.\n2026-04-25 09:56:50,828 [root] DEBUG: 6484: AllocationHandler: Previously reserved region at 0x08340000, committing at: 0x08340000.\n2026-04-25 09:56:50,844 [root] DEBUG: 6484: DLL loaded at 0x747C0000: C:\\Windows\\system32\\mswsock (0x52000 bytes).\n2026-04-25 09:56:51,307 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07880000.\n2026-04-25 09:56:51,626 [root] DEBUG: 6484: DLL loaded at 0x715D0000: C:\\Windows\\SYSTEM32\\DNSAPI (0x90000 bytes).\n2026-04-25 09:56:51,637 [root] DEBUG: 6484: DLL loaded at 0x74BB0000: C:\\Windows\\SYSTEM32\\IPHLPAPI (0x32000 bytes).\n2026-04-25 09:56:51,646 [root] DEBUG: 6484: DLL loaded at 0x77E20000: C:\\Windows\\System32\\NSI (0x7000 bytes).\n2026-04-25 09:56:51,648 [root] DEBUG: 6484: DLL loaded at 0x73E70000: C:\\Windows\\System32\\rasadhlp (0x8000 bytes).\n2026-04-25 09:56:52,740 [root] DEBUG: 6484: DLL loaded at 0x71570000: C:\\Windows\\System32\\fwpuclnt (0x59000 bytes).\n2026-04-25 09:56:52,780 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:53,217 [root] DEBUG: 6484: DumpRegion: Dump at 0x02890000 skipped due to dump limit 10\n2026-04-25 09:56:53,227 [root] DEBUG: 6484: ProcessTrackedRegion: Failed to dump region at 0x02890000.\n2026-04-25 09:56:53,227 [root] DEBUG: 6484: YaraScan: Scanning 0x02890000, size 0xad84\n2026-04-25 09:56:53,768 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08300000.\n2026-04-25 09:56:53,853 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x08360000.\n2026-04-25 09:56:53,927 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x07AC0000.\n2026-04-25 09:56:58,020 [root] DEBUG: 6484: AllocationHandler: Allocation already in tracked region list: 0x03FC0000.\n2026-04-25 09:58:45,625 [root] DEBUG: 6484: api-cap: GetSystemTimeAsFileTime hook disabled due to count: 5000\n2026-04-25 09:59:13,610 [root] INFO: Analysis timeout hit, terminating analysis\n2026-04-25 09:59:13,610 [lib.api.process] INFO: Terminate event set for <Process 6484 91d880890f6e481edcbe.exe>\n2026-04-25 09:59:13,610 [root] DEBUG: 6484: Terminate Event: Attempting to dump process 6484\n2026-04-25 09:59:13,610 [root] DEBUG: 6484: VerifyCodeSection: Executable code does not match, 0x1c796 of 0x1c797 matching\n2026-04-25 09:59:13,610 [root] DEBUG: 6484: DoProcessDump: Code modification detected, dumping Imagebase at 0x00590000.\n2026-04-25 09:59:13,625 [root] DEBUG: 6484: DumpImageInCurrentProcess: Attempting to dump virtual PE image.\n2026-04-25 09:59:13,625 [root] DEBUG: 6484: DumpProcess: Instantiating PeParser with address: 0x00590000.\n2026-04-25 09:59:13,625 [root] DEBUG: 6484: DumpProcess: Module entry point VA is 0x005AE792.\n2026-04-25 09:59:13,625 [root] DEBUG: 6484: PeParser: readPeSectionsFromProcess: readSectionFromProcess failed address 0x00592000, section 1\n2026-04-25 09:59:13,641 [root] DEBUG: 6484: PeParser: readPeSectionsFromProcess: readSectionFromProcess failed address 0x005B0000, section 2\n2026-04-25 09:59:13,641 [root] DEBUG: 6484: reBasePEImage: Exception rebasing image from 0x00590000 to 0x00400000.\n2026-04-25 09:59:13,641 [root] DEBUG: 6484: readPeSectionsFromProcess: Failed to relocate image back to header image base 0x00400000.\n2026-04-25 09:59:13,719 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_288641359625642026 to procdump\\6d95dd6c471c315727e5b1d79e30acaca576e76c5174d935c0bd542ce56cfe19; Size is 91136; Max size: 100000000\n2026-04-25 09:59:13,719 [root] DEBUG: 6484: DumpProcess: Module image dump success - dump size 0x16400.\n2026-04-25 09:59:13,735 [root] DEBUG: 6484: DumpInterestingRegions: Dumping .NET image at 0x07CC0000.\n2026-04-25 09:59:13,735 [root] DEBUG: 6484: DumpImageInCurrentProcess: Attempting to dump 'raw' PE image (process 6484)\n2026-04-25 09:59:13,750 [root] DEBUG: 6484: DumpPE: Instantiating PeParser with address: 0x07CC0000.\n2026-04-25 09:59:13,860 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_153091431359625642026 to CAPE\\61e9d5c0727665e9ef3f328141397be47c65ed11ab621c644b5bbf1d67138403; Size is 19968; Max size: 100000000\n2026-04-25 09:59:13,875 [root] DEBUG: 6484: DumpPE: PE file at 0x07CC0000 dumped successfully - dump size 0x4e00.\n2026-04-25 09:59:13,875 [root] DEBUG: 6484: DumpInterestingRegions: Dumping .NET image at 0x07F60000.\n2026-04-25 09:59:13,875 [root] DEBUG: 6484: DumpImageInCurrentProcess: Attempting to dump 'raw' PE image (process 6484)\n2026-04-25 09:59:13,875 [root] DEBUG: 6484: DumpPE: Instantiating PeParser with address: 0x07F60000.\n2026-04-25 09:59:13,938 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_59412921359625642026 to CAPE\\01e3b18bd63981decb384f558f0321346c3334bb6e6f97c31c6c95c4ab2fe354; Size is 100352; Max size: 100000000\n2026-04-25 09:59:13,954 [root] DEBUG: 6484: DumpPE: PE file at 0x07F60000 dumped successfully - dump size 0x18800.\n2026-04-25 09:59:13,954 [root] DEBUG: 6484: DumpInterestingRegions: Dumping .NET image at 0x080D0000.\n2026-04-25 09:59:13,969 [root] DEBUG: 6484: DumpImageInCurrentProcess: Attempting to dump 'raw' PE image (process 6484)\n2026-04-25 09:59:13,969 [root] DEBUG: 6484: DumpPE: Instantiating PeParser with address: 0x080D0000.\n2026-04-25 09:59:13,985 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_261025001359625642026 to CAPE\\f9b8c3f31375e9a1ec105f930f751869a804110d29d6b38e7298622eb74b2bec; Size is 12288; Max size: 100000000\n2026-04-25 09:59:14,000 [root] DEBUG: 6484: DumpPE: PE file at 0x080D0000 dumped successfully - dump size 0x3000.\n2026-04-25 09:59:14,016 [root] DEBUG: 6484: DumpPEsInRange: Scanning range 0x08340000 - 0x0834085D.\n2026-04-25 09:59:14,016 [root] DEBUG: 6484: ScanForDisguisedPE: No PE image located in range 0x08340000-0x0834085D.\n2026-04-25 09:59:14,094 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\CAPE\\6484_3067041459625642026 to CAPE\\6b675aee5977bf2c1feca2cf8cbe8b973aa8ac7c03ca3ccb4b7bda31c8f7c4fc; Size is 2141; Max size: 100000000\n2026-04-25 09:59:14,110 [root] DEBUG: 6484: DumpMemory: Payload successfully created: C:\\pFgSGb\\CAPE\\6484_3067041459625642026 (size 2141 bytes)\n2026-04-25 09:59:14,110 [root] DEBUG: 6484: DumpRegion: Dumped entire allocation from 0x08340000, size 4096 bytes.\n2026-04-25 09:59:14,110 [root] DEBUG: 6484: ProcessTrackedRegion: Dumped region at 0x08340000.\n2026-04-25 09:59:14,125 [root] DEBUG: 6484: YaraScan: Scanning 0x08340000, size 0x85d\n2026-04-25 09:59:14,125 [root] INFO: Added new file to list with pid 6484 and path C:\\Users\\cape\\AppData\\Local\\Temp\\client.log\n2026-04-25 09:59:14,125 [lib.api.process] INFO: Termination confirmed for <Process 6484 91d880890f6e481edcbe.exe>\n2026-04-25 09:59:14,125 [root] INFO: Terminate event set for process 6484\n2026-04-25 09:59:14,141 [root] INFO: Created shutdown mutex\n2026-04-25 09:59:14,125 [root] DEBUG: 6484: Terminate Event: monitor shutdown complete for process 6484\n2026-04-25 09:59:15,157 [root] INFO: Shutting down package\n2026-04-25 09:59:15,157 [root] INFO: Stopping auxiliary modules\n2026-04-25 09:59:15,157 [root] INFO: Stopping auxiliary module: Browser\n2026-04-25 09:59:15,157 [root] INFO: Stopping auxiliary module: Human\n2026-04-25 09:59:15,219 [root] INFO: Stopping auxiliary module: Screenshots\n2026-04-25 09:59:16,110 [root] INFO: Finishing auxiliary modules\n2026-04-25 09:59:16,110 [root] INFO: Shutting down pipe server and dumping dropped files\n2026-04-25 09:59:16,125 [lib.common.results] INFO: Uploading file C:\\Users\\cape\\AppData\\Roaming\\339D92A4-C255-4420-97B0-5631BD58867A\\run.dat to files\\67302b422117ed46990861bae7ce25023b9076211976eab8f365efecc634799d; Size is 8; Max size: 100000000\n2026-04-25 09:59:16,141 [lib.common.results] INFO: Uploading file C:\\Program Files (x86)\\NAT Subsystem\\natss.exe to files\\91d880890f6e481edcbe0c5a1a26e8b343d2abeaf4d8c62de04bc75aea6aa7d4; Size is 207360; Max size: 100000000\n2026-04-25 09:59:16,157 [lib.common.results] INFO: Uploading file C:\\Users\\cape\\AppData\\Local\\Temp\\client.log to files\\a99c2ec934ef9cb0931cbd3f858f8f3f682453861c87fd7b0fba2913e8961fc4; Size is 20773; Max size: 100000000\n2026-04-25 09:59:16,157 [root] WARNING: Folder at path \"C:\\pFgSGb\\debugger\" does not exist, skipping\n2026-04-25 09:59:16,157 [root] INFO: Uploading files at path \"C:\\pFgSGb\\tlsdump\"\n2026-04-25 09:59:16,157 [lib.common.results] INFO: Uploading file C:\\pFgSGb\\tlsdump\\tlsdump.log to tlsdump\\tlsdump.log; Size is 18906; Max size: 100000000\n2026-04-25 09:59:16,172 [root] INFO: Analysis completed\n",
    "errors": []
  },
  "network": {
    "pcap_sha256": "b0a198ea648c1b3e4cd5d3988f6dbb93b39194a9b53b932823fbac5878ce8613",
    "hosts": [
      {
        "ip": "20.93.72.182",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "172.67.178.110",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "syashop.uk.com",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "172.67.147.249",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "bbc.in.net",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.16",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.108",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.100",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "46.149.110.67",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          80
        ]
      },
      {
        "ip": "72.154.7.105",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.102",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.98",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.101",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.107",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "72.154.7.109",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "13.107.6.156",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "84.47.178.41",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "20.165.94.54",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "150.171.27.11",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "173.194.73.94",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "i.pki.goog",
        "inaddrarpa": "",
        "ports": [
          80
        ]
      },
      {
        "ip": "84.47.178.56",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "84.47.178.49",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "52.123.242.97",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "40.126.53.14",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "4.207.247.139",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      },
      {
        "ip": "20.189.173.2",
        "country_name": "unknown",
        "asn": "",
        "asn_name": "",
        "hostname": "",
        "inaddrarpa": "",
        "ports": [
          443
        ]
      }
    ],
    "domains": [
      {
        "domain": "i.pki.goog",
        "ip": "173.194.73.94"
      },
      {
        "domain": "bbc.in.net",
        "ip": "172.67.147.249"
      },
      {
        "domain": "syashop.uk.com",
        "ip": "104.21.75.156"
      }
    ],
    "tcp": [
      {
        "src": "192.168.1.100",
        "sport": 49723,
        "dst": "20.189.173.2",
        "dport": 443,
        "offset": 24,
        "time": 0.0
      },
      {
        "src": "192.168.1.100",
        "sport": 49724,
        "dst": "20.189.173.2",
        "dport": 443,
        "offset": 95,
        "time": 0.9221460819244385
      },
      {
        "src": "192.168.1.100",
        "sport": 49784,
        "dst": "40.126.53.14",
        "dport": 443,
        "offset": 248,
        "time": 4.112910032272339
      },
      {
        "src": "192.168.1.100",
        "sport": 49808,
        "dst": "13.107.253.44",
        "dport": 443,
        "offset": 6712,
        "time": 4.353439092636108
      },
      {
        "src": "192.168.1.100",
        "sport": 49811,
        "dst": "84.47.178.49",
        "dport": 443,
        "offset": 38300,
        "time": 4.527976036071777
      },
      {
        "src": "192.168.1.100",
        "sport": 49718,
        "dst": "84.47.178.56",
        "dport": 443,
        "offset": 180859,
        "time": 4.827683925628662
      },
      {
        "src": "192.168.1.100",
        "sport": 49721,
        "dst": "8.8.8.8",
        "dport": 443,
        "offset": 294295,
        "time": 5.202671051025391
      },
      {
        "src": "192.168.1.100",
        "sport": 49815,
        "dst": "194.158.198.23",
        "dport": 80,
        "offset": 299657,
        "time": 5.608181953430176
      },
      {
        "src": "192.168.1.100",
        "sport": 49816,
        "dst": "52.140.118.28",
        "dport": 443,
        "offset": 311309,
        "time": 5.77262806892395
      },
      {
        "src": "192.168.1.100",
        "sport": 49818,
        "dst": "40.126.53.14",
        "dport": 443,
        "offset": 334104,
        "time": 6.041258096694946
      },
      {
        "src": "192.168.1.100",
        "sport": 49820,
        "dst": "8.8.8.8",
        "dport": 443,
        "offset": 352101,
        "time": 6.266822099685669
      },
      {
        "src": "192.168.1.100",
        "sport": 49821,
        "dst": "173.194.73.94",
        "dport": 80,
        "offset": 354605,
        "time": 6.284885883331299
      },
      {
        "src": "192.168.1.100",
        "sport": 49823,
        "dst": "194.158.198.23",
        "dport": 80,
        "offset": 383335,
        "time": 6.5840559005737305
      },
      {
        "src": "192.168.1.100",
        "sport": 49728,
        "dst": "150.171.27.11",
        "dport": 443,
        "offset": 385424,
        "time": 6.632797956466675
      },
      {
        "src": "192.168.1.100",
        "sport": 49824,
        "dst": "150.171.27.11",
        "dport": 443,
        "offset": 388021,
        "time": 6.681551933288574
      },
      {
        "src": "192.168.1.100",
        "sport": 49825,
        "dst": "40.126.53.14",
        "dport": 443,
        "offset": 408503,
        "time": 7.862298011779785
      },
      {
        "src": "192.168.1.100",
        "sport": 49828,
        "dst": "20.42.65.93",
        "dport": 443,
        "offset": 448353,
        "time": 8.354140043258667
      },
      {
        "src": "192.168.1.100",
        "sport": 49829,
        "dst": "4.207.247.139",
        "dport": 443,
        "offset": 464741,
        "time": 32.178175926208496
      },
      {
        "src": "192.168.1.100",
        "sport": 49834,
        "dst": "20.190.147.9",
        "dport": 443,
        "offset": 495727,
        "time": 32.409152030944824
      },
      {
        "src": "192.168.1.100",
        "sport": 49832,
        "dst": "52.185.211.133",
        "dport": 443,
        "offset": 530059,
        "time": 32.556206941604614
      },
      {
        "src": "192.168.1.100",
        "sport": 49837,
        "dst": "72.145.26.148",
        "dport": 443,
        "offset": 532244,
        "time": 32.65709590911865
      },
      {
        "src": "192.168.1.100",
        "sport": 49840,
        "dst": "4.207.247.139",
        "dport": 443,
        "offset": 595668,
        "time": 32.871926069259644
      },
      {
        "src": "192.168.1.100",
        "sport": 49842,
        "dst": "199.232.214.172",
        "dport": 80,
        "offset": 709327,
        "time": 32.96954107284546
      },
      {
        "src": "192.168.1.100",
        "sport": 49843,
        "dst": "104.208.16.88",
        "dport": 443,
        "offset": 1120129,
        "time": 33.79649496078491
      },
      {
        "src": "192.168.1.100",
        "sport": 49847,
        "dst": "20.44.239.154",
        "dport": 443,
        "offset": 1131784,
        "time": 34.13527202606201
      },
      {
        "src": "192.168.1.100",
        "sport": 49844,
        "dst": "52.185.211.133",
        "dport": 443,
        "offset": 1191172,
        "time": 34.76848101615906
      },
      {
        "src": "192.168.1.100",
        "sport": 49852,
        "dst": "20.165.94.63",
        "dport": 443,
        "offset": 1550036,
        "time": 36.41033601760864
      },
      {
        "src": "192.168.1.100",
        "sport": 49857,
        "dst": "8.8.8.8",
        "dport": 443,
        "offset": 1693389,
        "time": 37.011162996292114
      },
      {
        "src": "192.168.1.100",
        "sport": 49855,
        "dst": "20.165.94.54",
        "dport": 443,
        "offset": 1716862,
        "time": 37.097119092941284
      },
      {
        "src": "192.168.1.100",
        "sport": 49858,
        "dst": "52.123.129.14",
        "dport": 443,
        "offset": 1861682,
        "time": 37.57451605796814
      },
      {
        "src": "192.168.1.100",
        "sport": 49860,
        "dst": "20.165.94.63",
        "dport": 443,
        "offset": 1880530,
        "time": 37.975167989730835
      },
      {
        "src": "192.168.1.100",
        "sport": 49862,
        "dst": "52.123.128.14",
        "dport": 443,
        "offset": 1893239,
        "time": 38.42102003097534
      },
      {
        "src": "192.168.1.100",
        "sport": 49864,
        "dst": "52.123.128.14",
        "dport": 443,
        "offset": 1910074,
        "time": 38.65039801597595
      },
      {
        "src": "192.168.1.100",
        "sport": 49866,
        "dst": "20.44.239.154",
        "dport": 443,
        "offset": 1951487,
        "time": 39.199198961257935
      },
      {
        "src": "192.168.1.100",
        "sport": 49710,
        "dst": "84.47.178.41",
        "dport": 443,
        "offset": 2313049,
        "time": 39.715981006622314
      },
      {
        "src": "192.168.1.100",
        "sport": 49716,
        "dst": "84.47.178.56",
        "dport": 443,
        "offset": 2600038,
        "time": 39.79408288002014
      },
      {
        "src": "192.168.1.100",
        "sport": 49720,
        "dst": "8.8.4.4",
        "dport": 443,
        "offset": 2961928,
        "time": 40.98114800453186
      },
      {
        "src": "192.168.1.100",
        "sport": 49708,
        "dst": "13.107.6.156",
        "dport": 443,
        "offset": 2962069,
        "time": 41.012428998947144
      },
      {
        "src": "192.168.1.100",
        "sport": 49712,
        "dst": "84.47.178.41",
        "dport": 443,
        "offset": 10787024,
        "time": 42.199784994125366
      },
      {
        "src": "192.168.1.100",
        "sport": 49878,
        "dst": "4.207.247.139",
        "dport": 443,
        "offset": 111322234,
        "time": 50.1627459526062
      },
      {
        "src": "192.168.1.100",
        "sport": 49886,
        "dst": "204.79.197.203",
        "dport": 80,
        "offset": 111618881,
        "time": 66.22153401374817
      },
      {
        "src": "192.168.1.100",
        "sport": 49902,
        "dst": "20.165.94.46",
        "dport": 443,
        "offset": 111653272,
        "time": 84.72744989395142
      },
      {
        "src": "192.168.1.100",
        "sport": 49906,
        "dst": "13.71.55.58",
        "dport": 443,
        "offset": 111666818,
        "time": 85.82591104507446
      },
      {
        "src": "192.168.1.100",
        "sport": 49910,
        "dst": "2.23.90.38",
        "dport": 443,
        "offset": 111689844,
        "time": 86.29242300987244
      },
      {
        "src": "192.168.1.100",
        "sport": 49911,
        "dst": "46.149.110.67",
        "dport": 80,
        "offset": 111705751,
        "time": 86.57612299919128
      },
      {
        "src": "192.168.1.100",
        "sport": 49912,
        "dst": "46.149.110.67",
        "dport": 80,
        "offset": 111708750,
        "time": 87.04977607727051
      },
      {
        "src": "192.168.1.100",
        "sport": 49914,
        "dst": "46.149.110.67",
        "dport": 80,
        "offset": 111727313,
        "time": 87.22135496139526
      },
      {
        "src": "192.168.1.100",
        "sport": 49917,
        "dst": "72.154.7.110",
        "dport": 443,
        "offset": 113541283,
        "time": 87.7951090335846
      },
      {
        "src": "192.168.1.100",
        "sport": 49918,
        "dst": "72.154.7.107",
        "dport": 443,
        "offset": 113541727,
        "time": 87.79835104942322
      },
      {
        "src": "192.168.1.100",
        "sport": 49920,
        "dst": "72.154.7.106",
        "dport": 443,
        "offset": 113542615,
        "time": 87.83192205429077
      },
      {
        "src": "192.168.1.100",
        "sport": 49923,
        "dst": "2.23.90.38",
        "dport": 443,
        "offset": 113566210,
        "time": 88.6615149974823
      },
      {
        "src": "192.168.1.100",
        "sport": 49925,
        "dst": "2.23.90.38",
        "dport": 443,
        "offset": 113599583,
        "time": 89.21410298347473
      },
      {
        "src": "192.168.1.100",
        "sport": 49929,
        "dst": "52.123.245.100",
        "dport": 443,
        "offset": 113626279,
        "time": 91.27840304374695
      },
      {
        "src": "192.168.1.100",
        "sport": 49932,
        "dst": "40.119.249.228",
        "dport": 443,
        "offset": 113646627,
        "time": 91.76331305503845
      },
      {
        "src": "192.168.1.100",
        "sport": 49936,
        "dst": "40.119.249.228",
        "dport": 443,
        "offset": 113662143,
        "time": 93.46457099914551
      },
      {
        "src": "192.168.1.100",
        "sport": 49939,
        "dst": "162.159.142.9",
        "dport": 80,
        "offset": 114076526,
        "time": 102.7448890209198
      },
      {
        "src": "192.168.1.100",
        "sport": 49942,
        "dst": "162.159.142.9",
        "dport": 80,
        "offset": 114176649,
        "time": 104.28720593452454
      },
      {
        "src": "192.168.1.100",
        "sport": 49946,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 114881625,
        "time": 106.85346508026123
      },
      {
        "src": "192.168.1.100",
        "sport": 49950,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 114891783,
        "time": 110.94902896881104
      },
      {
        "src": "192.168.1.100",
        "sport": 49954,
        "dst": "150.171.109.51",
        "dport": 443,
        "offset": 114903934,
        "time": 114.23558497428894
      },
      {
        "src": "192.168.1.100",
        "sport": 49955,
        "dst": "199.232.214.172",
        "dport": 80,
        "offset": 114913293,
        "time": 114.31906795501709
      },
      {
        "src": "192.168.1.100",
        "sport": 49957,
        "dst": "52.123.128.14",
        "dport": 443,
        "offset": 115046005,
        "time": 114.99175000190735
      },
      {
        "src": "192.168.1.100",
        "sport": 49958,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 115056014,
        "time": 115.08458709716797
      },
      {
        "src": "192.168.1.100",
        "sport": 49960,
        "dst": "13.89.179.9",
        "dport": 443,
        "offset": 115072624,
        "time": 115.9777340888977
      },
      {
        "src": "192.168.1.100",
        "sport": 49962,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 115378861,
        "time": 119.23911690711975
      },
      {
        "src": "192.168.1.100",
        "sport": 49963,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 115662281,
        "time": 123.30109691619873
      },
      {
        "src": "192.168.1.100",
        "sport": 49964,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 115946059,
        "time": 127.365562915802
      },
      {
        "src": "192.168.1.100",
        "sport": 49965,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 116229251,
        "time": 131.42879009246826
      },
      {
        "src": "192.168.1.100",
        "sport": 49966,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 116946029,
        "time": 135.48705291748047
      },
      {
        "src": "192.168.1.100",
        "sport": 49967,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 116947138,
        "time": 139.55145502090454
      },
      {
        "src": "192.168.1.100",
        "sport": 49968,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 116948469,
        "time": 143.61237907409668
      },
      {
        "src": "192.168.1.100",
        "sport": 49969,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 116949507,
        "time": 147.67527508735657
      },
      {
        "src": "192.168.1.100",
        "sport": 49970,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 116950545,
        "time": 151.7378499507904
      },
      {
        "src": "192.168.1.100",
        "sport": 49972,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 116953958,
        "time": 155.79836106300354
      },
      {
        "src": "192.168.1.100",
        "sport": 49973,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 116955136,
        "time": 159.8654429912567
      },
      {
        "src": "192.168.1.100",
        "sport": 49974,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 116956550,
        "time": 163.94723105430603
      },
      {
        "src": "192.168.1.100",
        "sport": 49976,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 116959253,
        "time": 168.01824688911438
      },
      {
        "src": "192.168.1.100",
        "sport": 49977,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 116965623,
        "time": 172.0822410583496
      },
      {
        "src": "192.168.1.100",
        "sport": 49979,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 116978447,
        "time": 176.43088006973267
      },
      {
        "src": "192.168.1.100",
        "sport": 49980,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 116982316,
        "time": 180.49816799163818
      },
      {
        "src": "192.168.1.100",
        "sport": 49982,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117000798,
        "time": 184.5601019859314
      },
      {
        "src": "192.168.1.100",
        "sport": 49983,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117002418,
        "time": 188.62008500099182
      },
      {
        "src": "192.168.1.100",
        "sport": 49985,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117017835,
        "time": 192.68485808372498
      },
      {
        "src": "192.168.1.100",
        "sport": 49986,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117019370,
        "time": 196.74836087226868
      },
      {
        "src": "192.168.1.100",
        "sport": 49988,
        "dst": "52.123.243.166",
        "dport": 443,
        "offset": 117022319,
        "time": 199.1370348930359
      },
      {
        "src": "192.168.1.100",
        "sport": 49989,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117045539,
        "time": 200.81232810020447
      },
      {
        "src": "192.168.1.100",
        "sport": 49990,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117050426,
        "time": 204.87067008018494
      },
      {
        "src": "192.168.1.100",
        "sport": 49991,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117051674,
        "time": 208.93246388435364
      },
      {
        "src": "192.168.1.100",
        "sport": 49992,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117052865,
        "time": 212.99709010124207
      },
      {
        "src": "192.168.1.100",
        "sport": 49993,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117054489,
        "time": 217.0573480129242
      },
      {
        "src": "192.168.1.100",
        "sport": 49995,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117055527,
        "time": 221.1264729499817
      },
      {
        "src": "192.168.1.100",
        "sport": 49996,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117056636,
        "time": 225.18331909179688
      },
      {
        "src": "192.168.1.100",
        "sport": 49997,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117057745,
        "time": 229.2447850704193
      },
      {
        "src": "192.168.1.100",
        "sport": 49998,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117059317,
        "time": 233.30921006202698
      },
      {
        "src": "192.168.1.100",
        "sport": 49999,
        "dst": "172.67.147.249",
        "dport": 443,
        "offset": 117060355,
        "time": 237.37174487113953
      },
      {
        "src": "192.168.1.100",
        "sport": 50000,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117061393,
        "time": 241.43323397636414
      },
      {
        "src": "192.168.1.100",
        "sport": 50001,
        "dst": "172.67.178.110",
        "dport": 443,
        "offset": 117062571,
        "time": 245.50046110153198
      }
    ],
    "udp": [
      {
        "src": "192.168.1.100",
        "sport": 53401,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 48484,
        "time": 4.56452202796936
      },
      {
        "src": "192.168.1.100",
        "sport": 63630,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 294506,
        "time": 5.255068063735962
      },
      {
        "src": "192.168.1.100",
        "sport": 53912,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 301185,
        "time": 5.66759991645813
      },
      {
        "src": "192.168.1.100",
        "sport": 54438,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 351463,
        "time": 6.24655294418335
      },
      {
        "src": "192.168.1.100",
        "sport": 57499,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 381377,
        "time": 6.499183893203735
      },
      {
        "src": "192.168.1.100",
        "sport": 138,
        "dst": "192.168.1.255",
        "dport": 138,
        "offset": 464196,
        "time": 31.66207194328308
      },
      {
        "src": "192.168.1.100",
        "sport": 55191,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 475937,
        "time": 32.28953409194946
      },
      {
        "src": "192.168.1.100",
        "sport": 54808,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 531264,
        "time": 32.61273002624512
      },
      {
        "src": "192.168.1.100",
        "sport": 54597,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 756096,
        "time": 33.613818883895874
      },
      {
        "src": "192.168.1.100",
        "sport": 62589,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 1119463,
        "time": 33.70774602890015
      },
      {
        "src": "192.168.1.100",
        "sport": 60598,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 1674869,
        "time": 36.8512818813324
      },
      {
        "src": "192.168.1.100",
        "sport": 57555,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 1857400,
        "time": 37.473483085632324
      },
      {
        "src": "192.168.1.100",
        "sport": 55398,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 1873335,
        "time": 37.77735495567322
      },
      {
        "src": "192.168.1.100",
        "sport": 56936,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 1892644,
        "time": 38.370882987976074
      },
      {
        "src": "192.168.1.100",
        "sport": 64460,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 2961499,
        "time": 40.87287497520447
      },
      {
        "src": "192.168.1.100",
        "sport": 64934,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 111652466,
        "time": 84.54358792304993
      },
      {
        "src": "192.168.1.100",
        "sport": 57313,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 111665809,
        "time": 85.7557909488678
      },
      {
        "src": "192.168.1.100",
        "sport": 49611,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 111689280,
        "time": 86.24330997467041
      },
      {
        "src": "192.168.1.100",
        "sport": 52655,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 111710390,
        "time": 87.15227603912354
      },
      {
        "src": "192.168.1.100",
        "sport": 52011,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 113538192,
        "time": 87.60069990158081
      },
      {
        "src": "192.168.1.100",
        "sport": 56082,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 113563955,
        "time": 88.61029291152954
      },
      {
        "src": "192.168.1.100",
        "sport": 53081,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 113626625,
        "time": 91.2990050315857
      },
      {
        "src": "192.168.1.100",
        "sport": 58845,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 114076000,
        "time": 102.6825819015503
      },
      {
        "src": "192.168.1.100",
        "sport": 59524,
        "dst": "8.8.8.8",
        "dport": 53,
        "offset": 114875794,
        "time": 104.64655089378357
      },
      {
        "src": "192.168.1.100",
        "sport": 57269,
        "dst": "8.8.4.4",
        "dport": 53,
        "offset": 114876488,
        "time": 105.96154999732971
      },
      {
        "src": "192.168.1.100",
        "sport": 62469,
        "dst": "8.8.4.4",
        "dport": 53,
        "offset": 114902582,
        "time": 114.04657888412476
      },
      {
        "src": "192.168.1.100",
        "sport": 55146,
        "dst": "8.8.4.4",
        "dport": 53,
        "offset": 114920938,
        "time": 114.50011587142944
      },
      {
        "src": "192.168.1.100",
        "sport": 63570,
        "dst": "8.8.4.4",
        "dport": 53,
        "offset": 115061711,
        "time": 115.34047102928162
      },
      {
        "src": "192.168.1.100",
        "sport": 58765,
        "dst": "8.8.4.4",
        "dport": 53,
        "offset": 115378415,
        "time": 119.1176929473877
      },
      {
        "src": "192.168.1.100",
        "sport": 64852,
        "dst": "8.8.4.4",
        "dport": 53,
        "offset": 117001755,
        "time": 188.57581210136414
      }
    ],
    "icmp": [],
    "http": [
      {
        "count": 2,
        "host": "i.pki.goog",
        "port": 80,
        "data": "GET /gsr1.crt HTTP/1.1\r\nHost: i.pki.goog\r\nConnection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0\r\nAccept-Encoding: gzip, deflate\r\n\r\n",
        "uri": "http://i.pki.goog/gsr1.crt",
        "body": "",
        "path": "/gsr1.crt",
        "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110918.344622
      },
      {
        "count": 2,
        "host": "i.pki.goog",
        "port": 80,
        "data": "GET /r4.crt HTTP/1.1\r\nHost: i.pki.goog\r\nConnection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0\r\nAccept-Encoding: gzip, deflate\r\n\r\n",
        "uri": "http://i.pki.goog/r4.crt",
        "body": "",
        "path": "/r4.crt",
        "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110918.366318
      },
      {
        "count": 2,
        "host": "i.pki.goog",
        "port": 80,
        "data": "GET /we2.crt HTTP/1.1\r\nHost: i.pki.goog\r\nConnection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0\r\nAccept-Encoding: gzip, deflate\r\n\r\n",
        "uri": "http://i.pki.goog/we2.crt",
        "body": "",
        "path": "/we2.crt",
        "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110918.384622
      },
      {
        "count": 2,
        "host": "i.pki.goog",
        "port": 80,
        "data": "GET /gsr4.crt HTTP/1.1\r\nHost: i.pki.goog\r\nConnection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0\r\nAccept-Encoding: gzip, deflate\r\n\r\n",
        "uri": "http://i.pki.goog/gsr4.crt",
        "body": "",
        "path": "/gsr4.crt",
        "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110918.408093
      },
      {
        "count": 1,
        "host": "46.149.110.67",
        "port": 80,
        "data": "GET /filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee/pieceshash?cacheHostOrigin=msedge.f.dl.delivery.mp.microsoft.com HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Microsoft-Delivery-Optimization/10.0\r\nMS-CV: Bx+MMl9y6kC+cdYnPKJrqA.0.2.3.1.1\r\nContent-Length: 0\r\nHost: 46.149.110.67\r\n\r\n",
        "uri": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee/pieceshash?cacheHostOrigin=msedge.f.dl.delivery.mp.microsoft.com",
        "body": "",
        "path": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee/pieceshash?cacheHostOrigin=msedge.f.dl.delivery.mp.microsoft.com",
        "user-agent": "Microsoft-Delivery-Optimization/10.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110998.635859
      },
      {
        "count": 1,
        "host": "46.149.110.67",
        "port": 80,
        "data": "GET /filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nRange: bytes=0-1\r\nUser-Agent: Microsoft-Delivery-Optimization/10.0\r\nMS-CV: Bx+MMl9y6kC+cdYnPKJrqA.0.2.6.1.1.1\r\nContent-Length: 0\r\nHost: 46.149.110.67\r\n\r\n",
        "uri": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "body": "",
        "path": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "user-agent": "Microsoft-Delivery-Optimization/10.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110999.109512
      },
      {
        "count": 1,
        "host": "46.149.110.67",
        "port": 80,
        "data": "GET /filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nRange: bytes=1048576-1697335\r\nUser-Agent: Microsoft-Delivery-Optimization/10.0\r\nMS-CV: Bx+MMl9y6kC+cdYnPKJrqA.0.2.6.1.1.2\r\nContent-Length: 0\r\nHost: 46.149.110.67\r\n\r\n",
        "uri": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "body": "",
        "path": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "user-agent": "Microsoft-Delivery-Optimization/10.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110999.22925
      },
      {
        "count": 1,
        "host": "46.149.110.67",
        "port": 80,
        "data": "GET /filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nRange: bytes=0-1048575\r\nUser-Agent: Microsoft-Delivery-Optimization/10.0\r\nMS-CV: Bx+MMl9y6kC+cdYnPKJrqA.0.2.6.1.1.3\r\nContent-Length: 0\r\nHost: 46.149.110.67\r\n\r\n",
        "uri": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "body": "",
        "path": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "user-agent": "Microsoft-Delivery-Optimization/10.0",
        "version": "1.1",
        "method": "GET",
        "first_seen": 1777110999.281091
      }
    ],
    "dns": [
      {
        "request": "i.pki.goog",
        "type": "A",
        "answers": [
          {
            "type": "A",
            "data": "173.194.73.94"
          },
          {
            "type": "CNAME",
            "data": "pki-goog.l.google.com"
          }
        ],
        "first_seen": 1777110918.306635
      },
      {
        "request": "bbc.in.net",
        "type": "A",
        "answers": [
          {
            "type": "A",
            "data": "172.67.147.249"
          },
          {
            "type": "A",
            "data": "104.21.71.182"
          }
        ],
        "first_seen": 1777111016.706287
      },
      {
        "request": "syashop.uk.com",
        "type": "A",
        "answers": [
          {
            "type": "A",
            "data": "104.21.75.156"
          },
          {
            "type": "A",
            "data": "172.67.178.110"
          }
        ],
        "first_seen": 1777111031.177429
      }
    ],
    "smtp": [],
    "irc": [],
    "dead_hosts": [
      [
        "52.123.242.97",
        443
      ],
      [
        "72.154.7.109",
        443
      ],
      [
        "72.154.7.98",
        443
      ],
      [
        "72.154.7.101",
        443
      ],
      [
        "72.154.7.102",
        443
      ],
      [
        "72.154.7.105",
        443
      ],
      [
        "72.154.7.100",
        443
      ],
      [
        "72.154.7.108",
        443
      ],
      [
        "72.154.7.16",
        443
      ]
    ]
  },
  "suricata": {
    "alerts": [],
    "tls": [
      {
        "srcport": 49820,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "8.8.8.8",
        "timestamp": "2026-04-25 09:55:18.345870+0000",
        "version": "TLS 1.3",
        "sni": "dns.google",
        "ja3": {
          "hash": "87c36e0efdb847c153954b9f4778e764",
          "string": "771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,45-13-43-51-23-0-65037-65281-5-27-10-11-35-18-16-17613,4588-29-23-24,0"
        },
        "ja3s": {
          "hash": "eb1d94daa7e0344597e756a1fb6e7054",
          "string": "771,4865,51-43"
        }
      },
      {
        "srcport": 49822,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "8.8.8.8",
        "timestamp": "2026-04-25 09:55:18.556524+0000",
        "version": "TLS 1.3",
        "sni": "dns.google",
        "ja3": {
          "hash": "eca10cbdddc3be37612b1d322437c105",
          "string": "771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,51-23-5-45-27-65281-0-35-16-65037-43-10-17613-13-18-11,4588-29-23-24,0"
        },
        "ja3s": {
          "hash": "eb1d94daa7e0344597e756a1fb6e7054",
          "string": "771,4865,51-43"
        }
      },
      {
        "srcport": 49857,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "8.8.8.8",
        "timestamp": "2026-04-25 09:55:49.088908+0000",
        "version": "TLS 1.3",
        "sni": "dns.google",
        "ja3": {
          "hash": "00cf290bd02b8f31a70af6a46e70e981",
          "string": "771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,18-10-16-17613-11-65037-13-0-51-5-27-43-45-23-35-65281,4588-29-23-24,0"
        },
        "ja3s": {
          "hash": "eb1d94daa7e0344597e756a1fb6e7054",
          "string": "771,4865,51-43"
        }
      }
    ],
    "perf": [],
    "files": [],
    "http": [
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.360457+0000",
        "uri": "/gsr1.crt",
        "length": 797,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.384622+0000",
        "uri": "/r4.crt",
        "length": 455,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.408093+0000",
        "uri": "/we2.crt",
        "length": 582,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.437610+0000",
        "uri": "/gsr4.crt",
        "length": 480,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.452969+0000",
        "uri": "/gsr1.crt",
        "length": 797,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.473584+0000",
        "uri": "/r4.crt",
        "length": 455,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.498457+0000",
        "uri": "/we2.crt",
        "length": 582,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49821,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "173.194.73.94",
        "timestamp": "2026-04-25 09:55:18.559178+0000",
        "uri": "/gsr4.crt",
        "length": 480,
        "hostname": "i.pki.goog",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/pkix-cert",
        "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0",
        "referrer": null
      },
      {
        "srcport": 49911,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "46.149.110.67",
        "timestamp": "2026-04-25 09:56:38.725442+0000",
        "uri": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee/pieceshash?cacheHostOrigin=msedge.f.dl.delivery.mp.microsoft.com",
        "length": 246,
        "hostname": "46.149.110.67",
        "status": 200,
        "http_method": "GET",
        "contenttype": "application/octet-stream",
        "ua": "Microsoft-Delivery-Optimization/10.0",
        "referrer": null
      },
      {
        "srcport": 49912,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "46.149.110.67",
        "timestamp": "2026-04-25 09:56:39.193698+0000",
        "uri": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "length": 2,
        "hostname": "46.149.110.67",
        "status": 206,
        "http_method": "GET",
        "contenttype": "application/octet-stream",
        "ua": "Microsoft-Delivery-Optimization/10.0",
        "referrer": null
      },
      {
        "srcport": 49912,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "46.149.110.67",
        "timestamp": "2026-04-25 09:56:39.499609+0000",
        "uri": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "length": 648760,
        "hostname": "46.149.110.67",
        "status": 206,
        "http_method": "GET",
        "contenttype": "application/octet-stream",
        "ua": "Microsoft-Delivery-Optimization/10.0",
        "referrer": null
      },
      {
        "srcport": 49914,
        "srcip": "192.168.1.100",
        "dstport": 80,
        "dstip": "46.149.110.67",
        "timestamp": "2026-04-25 09:56:39.647864+0000",
        "uri": "/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com",
        "length": 1048576,
        "hostname": "46.149.110.67",
        "status": 206,
        "http_method": "GET",
        "contenttype": "application/octet-stream",
        "ua": "Microsoft-Delivery-Optimization/10.0",
        "referrer": null
      },
      {
        "srcport": 49946,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:56:58.939433+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49950,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:03.050486+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49958,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:07.165998+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49962,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:57:11.325318+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49963,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:57:15.384862+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49964,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:57:19.451368+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49965,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:23.514261+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49966,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:27.572829+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49967,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:31.635684+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49968,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:57:35.696486+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49969,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:57:39.758550+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49970,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:57:43.820436+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49972,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:47.882606+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49973,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:51.951307+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49974,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:57:56.029464+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49976,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:00.102507+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49977,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:04.168481+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49979,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:08.515365+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49980,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:58:12.581974+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49982,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:58:16.644446+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49983,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:58:20.702579+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49985,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:24.769514+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49986,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:28.833201+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49989,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:32.898291+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49990,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:58:36.955165+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49991,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:58:41.014195+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49992,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:58:45.078754+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49993,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:49.141610+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49995,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:53.211335+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49996,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:58:57.266493+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49997,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:59:01.326850+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49998,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:59:05.392578+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 49999,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.147.249",
        "timestamp": "2026-04-25 09:59:09.453718+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 50000,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:59:13.515333+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      },
      {
        "srcport": 50001,
        "srcip": "192.168.1.100",
        "dstport": 443,
        "dstip": "172.67.178.110",
        "timestamp": "2026-04-25 09:59:17.582972+0000",
        "uri": "\u0015\\x9c\\xdb\u001a\\xe4\\xd9\\xe4w\\x8b\\xc6*%",
        "length": 155,
        "hostname": null,
        "status": 400,
        "http_method": "@\u0000\u0000\u0000\\x93F\\x8e\\xf9\\xca\\xe1f8\\xa8\\xa7K/d\\x8c\\xdeuz\\xbc\\xca\\xa5\\xe7/\\xd7\\xfe(\\xd3\\x9b\\x82\\xfc\\xd1\\x81\\xb1\\xe6M\\xc2\u000e'\\xcb}\\xd5T'\\xf0\\xe9Yy1\u001b+\\xaa\\xb8",
        "contenttype": "text/html",
        "ua": null,
        "referrer": null
      }
    ],
    "dns": [
      {
        "timestamp": "2026-04-25T09:55:18.306635+0000",
        "flow_id": 1879940109601511,
        "pcap_cnt": 487,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 62144,
        "dest_ip": "8.8.8.8",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "query",
          "id": 45301,
          "rrname": "i.pki.goog",
          "rrtype": "A",
          "tx_id": 0,
          "opcode": 0
        }
      },
      {
        "timestamp": "2026-04-25T09:55:18.325192+0000",
        "flow_id": 1879940109601511,
        "pcap_cnt": 491,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 62144,
        "dest_ip": "8.8.8.8",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "answer",
          "id": 45301,
          "flags": "8180",
          "qr": true,
          "rd": true,
          "ra": true,
          "opcode": 0,
          "rrname": "i.pki.goog",
          "rrtype": "A",
          "rcode": "NOERROR",
          "answers": [
            {
              "rrname": "i.pki.goog",
              "rrtype": "CNAME",
              "ttl": 292,
              "rdata": "pki-goog.l.google.com"
            },
            {
              "rrname": "pki-goog.l.google.com",
              "rrtype": "A",
              "ttl": 300,
              "rdata": "173.194.73.94"
            }
          ],
          "grouped": {
            "CNAME": [
              "pki-goog.l.google.com"
            ],
            "A": [
              "173.194.73.94"
            ]
          }
        }
      },
      {
        "timestamp": "2026-04-25T09:55:18.306289+0000",
        "flow_id": 1878455029283048,
        "pcap_cnt": 486,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 54438,
        "dest_ip": "8.8.8.8",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "query",
          "id": 10042,
          "rrname": "i.pki.goog",
          "rrtype": "HTTPS",
          "tx_id": 0,
          "opcode": 0
        }
      },
      {
        "timestamp": "2026-04-25T09:55:18.328066+0000",
        "flow_id": 1878455029283048,
        "pcap_cnt": 494,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 54438,
        "dest_ip": "8.8.8.8",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "answer",
          "id": 10042,
          "flags": "8180",
          "qr": true,
          "rd": true,
          "ra": true,
          "opcode": 0,
          "rrname": "i.pki.goog",
          "rrtype": "HTTPS",
          "rcode": "NOERROR",
          "answers": [
            {
              "rrname": "i.pki.goog",
              "rrtype": "CNAME",
              "ttl": 248,
              "rdata": "pki-goog.l.google.com"
            }
          ],
          "grouped": {
            "CNAME": [
              "pki-goog.l.google.com"
            ]
          },
          "authorities": [
            {
              "rrname": "l.google.com",
              "rrtype": "SOA",
              "ttl": 60,
              "soa": {
                "mname": "ns1.google.com",
                "rname": "dns-admin.google.com",
                "serial": 904926899,
                "refresh": 900,
                "retry": 900,
                "expire": 1800,
                "minimum": 60
              }
            }
          ]
        }
      },
      {
        "timestamp": "2026-04-25T09:56:56.706287+0000",
        "flow_id": 218732494129270,
        "pcap_cnt": 111495,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 59524,
        "dest_ip": "8.8.8.8",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "query",
          "id": 57990,
          "rrname": "bbc.in.net",
          "rrtype": "A",
          "tx_id": 0,
          "opcode": 0
        }
      },
      {
        "timestamp": "2026-04-25T09:56:57.704840+0000",
        "flow_id": 493992343985226,
        "pcap_cnt": 111498,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 59524,
        "dest_ip": "8.8.4.4",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "query",
          "id": 57990,
          "rrname": "bbc.in.net",
          "rrtype": "A",
          "tx_id": 0,
          "opcode": 0
        }
      },
      {
        "timestamp": "2026-04-25T09:56:57.776711+0000",
        "flow_id": 218732494129270,
        "pcap_cnt": 111500,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 59524,
        "dest_ip": "8.8.8.8",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "answer",
          "id": 57990,
          "flags": "8180",
          "qr": true,
          "rd": true,
          "ra": true,
          "opcode": 0,
          "rrname": "bbc.in.net",
          "rrtype": "A",
          "rcode": "NOERROR",
          "answers": [
            {
              "rrname": "bbc.in.net",
              "rrtype": "A",
              "ttl": 300,
              "rdata": "104.21.71.182"
            },
            {
              "rrname": "bbc.in.net",
              "rrtype": "A",
              "ttl": 300,
              "rdata": "172.67.147.249"
            }
          ],
          "grouped": {
            "A": [
              "104.21.71.182",
              "172.67.147.249"
            ]
          }
        }
      },
      {
        "timestamp": "2026-04-25T09:56:57.763516+0000",
        "flow_id": 493992343985226,
        "pcap_cnt": 111499,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 59524,
        "dest_ip": "8.8.4.4",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "answer",
          "id": 57990,
          "flags": "8180",
          "qr": true,
          "rd": true,
          "ra": true,
          "opcode": 0,
          "rrname": "bbc.in.net",
          "rrtype": "A",
          "rcode": "NOERROR",
          "answers": [
            {
              "rrname": "bbc.in.net",
              "rrtype": "A",
              "ttl": 300,
              "rdata": "172.67.147.249"
            },
            {
              "rrname": "bbc.in.net",
              "rrtype": "A",
              "ttl": 300,
              "rdata": "104.21.71.182"
            }
          ],
          "grouped": {
            "A": [
              "172.67.147.249",
              "104.21.71.182"
            ]
          }
        }
      },
      {
        "timestamp": "2026-04-25T09:57:11.177429+0000",
        "flow_id": 2169430860796641,
        "pcap_cnt": 112250,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 58765,
        "dest_ip": "8.8.4.4",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "query",
          "id": 33173,
          "rrname": "syashop.uk.com",
          "rrtype": "A",
          "tx_id": 0,
          "opcode": 0
        }
      },
      {
        "timestamp": "2026-04-25T09:57:11.268578+0000",
        "flow_id": 2169430860796641,
        "pcap_cnt": 112251,
        "event_type": "dns",
        "src_ip": "192.168.1.100",
        "src_port": 58765,
        "dest_ip": "8.8.4.4",
        "dest_port": 53,
        "proto": "UDP",
        "pkt_src": "wire/pcap",
        "dns": {
          "version": 2,
          "type": "answer",
          "id": 33173,
          "flags": "8180",
          "qr": true,
          "rd": true,
          "ra": true,
          "opcode": 0,
          "rrname": "syashop.uk.com",
          "rrtype": "A",
          "rcode": "NOERROR",
          "answers": [
            {
              "rrname": "syashop.uk.com",
              "rrtype": "A",
              "ttl": 300,
              "rdata": "172.67.178.110"
            },
            {
              "rrname": "syashop.uk.com",
              "rrtype": "A",
              "ttl": 300,
              "rdata": "104.21.75.156"
            }
          ],
          "grouped": {
            "A": [
              "172.67.178.110",
              "104.21.75.156"
            ]
          }
        }
      }
    ],
    "ssh": [],
    "fileinfo": [],
    "eve_log_full_path": "/opt/CAPEv2/storage/analyses/46/logs/eve.json",
    "alert_log_full_path": null,
    "tls_log_full_path": null,
    "http_log_full_path": null,
    "file_log_full_path": null,
    "ssh_log_full_path": null,
    "dns_log_full_path": null
  },
  "url_analysis": {},
  "procmemory": [],
  "signatures": [
    {
      "name": "antivm_checks_available_memory",
      "description": "Checks available memory",
      "categories": [
        "antivm"
      ],
      "severity": 1,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 2213
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8517
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8522
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15317
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15321
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "queries_computer_name",
      "description": "Queries computer hostname",
      "categories": [
        "system_discovery"
      ],
      "severity": 1,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 3282
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3575
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3829
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4074
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4321
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4561
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4805
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5043
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5271
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5684
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6095
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6500
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6898
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7322
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7732
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8136
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8577
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8994
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9432
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9819
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10212
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10620
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11024
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11449
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11845
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12254
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12659
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13071
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13476
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13779
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14037
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14302
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14553
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14813
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15065
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15354
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "queries_user_name",
      "description": "Queries the username",
      "categories": [
        "system_discovery"
      ],
      "severity": 1,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 2098
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3576
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3830
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4075
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4322
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4562
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4806
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5044
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5272
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5685
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6096
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6501
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6899
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7323
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7733
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8137
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8578
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8997
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9433
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9820
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10213
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10621
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11025
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11450
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11846
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12255
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12660
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13072
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13477
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13780
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14038
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14303
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14554
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14814
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15066
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15355
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "dead_connect",
      "description": "Attempts to connect to a dead IP:Port (2 unique times)",
      "categories": [
        "network"
      ],
      "severity": 1,
      "weight": 0,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 3511
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3821
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4051
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4313
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4556
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4799
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5038
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5263
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5679
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6089
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6495
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6891
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7317
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7727
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8122
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8566
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8989
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9417
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9806
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10204
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10612
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11017
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11440
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11838
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12247
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12653
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13066
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13467
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13776
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14033
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14298
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14550
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14809
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15062
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15350
        },
        {
          "IP": "172.67.178.110:443 (unknown)"
        },
        {
          "IP": "172.67.147.249:443 (unknown)"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "queries_keyboard_layout",
      "description": "Queries the keyboard layout",
      "categories": [
        "location_discovery"
      ],
      "severity": 1,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 2283
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4241
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4883
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5553
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7190
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8857
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10470
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10908
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11345
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12531
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14215
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "queries_locale_api",
      "description": "Queries the computer locale (possible geofencing)",
      "categories": [
        "location_discovery",
        "geofence"
      ],
      "severity": 1,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 968
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1002
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1662
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1669
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "antidebug_setunhandledexceptionfilter",
      "description": "SetUnhandledExceptionFilter detected (possible anti-debug)",
      "categories": [
        "anti-debug"
      ],
      "severity": 1,
      "weight": 1,
      "confidence": 40,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 369
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "antisandbox_sleep",
      "description": "A process attempted to delay the analysis task.",
      "categories": [
        "anti-sandbox"
      ],
      "severity": 2,
      "weight": 4,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 1987
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2064
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2099
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2148
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2153
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2209
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2214
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2227
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2230
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2232
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2233
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2236
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2246
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2250
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2256
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2262
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2271
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2281
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2293
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2301
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2311
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2318
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2323
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2327
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2329
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2337
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2342
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2362
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2371
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2388
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2392
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2404
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2419
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2420
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2439
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2477
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2480
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2484
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2489
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2491
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2500
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2503
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2508
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2513
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2516
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2519
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2522
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2525
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2528
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2531
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2536
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2539
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2542
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2547
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2549
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2552
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2557
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2562
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2565
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2582
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2595
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2602
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2604
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2607
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2614
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2618
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2621
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2624
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2627
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2630
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2632
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2641
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2644
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2649
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2653
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2658
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2662
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2663
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2666
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2669
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2674
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2677
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2682
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2685
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2689
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2692
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2695
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2698
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2703
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2705
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2708
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2711
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2715
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2720
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2725
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2728
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2731
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2736
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2738
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2739
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2746
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2749
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2752
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2755
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2758
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2763
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2765
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2768
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2773
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2776
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2779
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2782
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2787
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2791
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2794
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2797
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2802
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2805
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2810
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2814
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2817
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2822
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2825
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2828
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2831
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2834
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2838
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2843
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2848
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2851
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2854
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2859
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2862
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2864
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2865
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2868
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2871
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2876
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2881
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2886
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2890
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2891
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2894
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2899
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2904
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2909
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2911
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2912
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2917
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2920
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2925
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2928
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2933
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2937
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2940
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2943
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2946
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2949
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2954
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2956
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2961
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2964
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2967
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2972
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2975
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2978
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2981
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2986
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2987
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2990
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2995
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 2998
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3003
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3008
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3010
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3011
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3014
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3019
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3022
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3025
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3029
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3034
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3036
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3037
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3040
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3045
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3054
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3059
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3070
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3076
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3079
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3098
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3101
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3104
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3107
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3112
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3116
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3152
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3167
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3171
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3185
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3206
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3209
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3212
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3219
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3225
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3232
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3234
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3237
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3240
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3243
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3269
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3274
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3277
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3285
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3287
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3288
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3293
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3294
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3390
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3395
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3398
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3403
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3417
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3420
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3423
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3428
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3433
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3436
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3439
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3442
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3444
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3447
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3450
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3453
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3456
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3459
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3462
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3465
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3468
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3470
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3474
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3480
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3483
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3487
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3490
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3491
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3496
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3499
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3503
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3508
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3509
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3510
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3514
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3517
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3518
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3521
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3522
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3525
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3526
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3529
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3530
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3533
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3534
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3537
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3538
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3539
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3542
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3547
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3548
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3551
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3562
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3564
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3567
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3568
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3590
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3609
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3614
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3617
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3622
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3625
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3628
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3631
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3635
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3638
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3641
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3644
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3647
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3650
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3653
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3656
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3659
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3661
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3664
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3665
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3672
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3675
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3678
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3683
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3687
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3690
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3694
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3695
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3700
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3703
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3706
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3709
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3712
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3714
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3717
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3720
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3725
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3730
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3733
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3736
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3740
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3743
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3746
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3749
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3752
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3755
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3756
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3759
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3762
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3764
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3767
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3770
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3775
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3778
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3781
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3784
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3787
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3789
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3792
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3795
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3800
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3803
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3806
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3809
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3812
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3822
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3826
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3838
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3847
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3854
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3857
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3860
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3863
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3866
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3869
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3871
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3872
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3875
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3880
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3883
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3886
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3891
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3893
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3896
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3901
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3904
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3907
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3910
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3913
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3916
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3919
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3923
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3926
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3929
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3932
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3937
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3942
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3944
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3949
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3952
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3955
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3958
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3963
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3966
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3969
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3972
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3974
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3977
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3982
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3987
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3990
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3993
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3994
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3998
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 3999
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4000
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4005
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4010
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4015
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4018
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4021
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4023
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4024
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4029
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4032
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4037
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4042
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4052
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4055
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4060
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4085
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4091
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4096
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4099
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4102
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4105
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4108
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4111
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4114
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4118
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4119
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4124
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4127
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4130
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4133
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4136
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4141
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4145
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4148
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4151
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4156
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4159
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4162
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4165
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4167
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4170
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4173
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4178
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4181
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4184
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4187
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4191
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4194
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4197
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4200
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4203
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4206
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4209
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4212
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4216
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4219
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4222
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4225
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4228
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4231
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4244
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4249
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4253
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4254
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4257
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4262
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4267
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4270
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4273
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4276
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4278
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4281
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4286
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4289
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4294
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4297
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4304
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4314
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4318
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4329
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4337
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4342
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4345
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4348
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4353
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4356
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4359
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4368
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4369
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4374
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4377
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4382
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4385
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4390
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4393
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4395
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4398
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4403
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4406
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4409
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4412
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4415
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4418
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4422
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4423
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4426
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4429
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4432
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4437
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4442
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4444
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4447
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4452
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4455
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4458
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4461
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4466
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4468
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4471
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4474
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4477
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4480
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4485
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4488
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4491
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4495
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4496
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4499
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4505
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4508
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4511
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4514
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4517
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4520
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4522
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4525
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4528
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4533
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4536
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4539
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4542
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4554
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4571
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4579
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4583
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4584
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4598
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4601
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4606
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4609
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4612
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4615
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4617
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4618
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4623
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4628
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4631
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4636
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4639
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4642
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4644
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4647
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4650
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4655
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4658
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4661
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4664
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4667
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4669
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4672
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4677
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4680
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4683
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4688
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4692
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4695
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4700
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4703
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4706
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4709
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4712
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4716
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4717
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4720
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4723
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4730
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4735
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4738
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4742
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4743
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4746
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4749
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4752
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4757
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4760
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4765
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4767
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4768
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4774
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4781
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4784
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4787
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4797
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4815
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4824
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4827
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4831
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4834
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4837
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4840
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4843
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4848
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4851
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4854
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4856
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4859
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4862
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4865
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4870
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4873
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4886
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4887
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4889
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4892
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4895
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4900
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4903
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4906
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4912
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4915
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4918
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4923
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4926
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4929
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4934
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4936
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4939
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4942
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4947
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4950
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4953
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4958
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4962
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4963
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4966
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4969
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4974
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4979
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4982
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4986
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4989
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4992
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 4995
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5000
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5003
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5006
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5008
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5009
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5016
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5018
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5021
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5026
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5035
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5053
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5061
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5066
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5068
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5071
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5076
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5079
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5082
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5087
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5090
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5092
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5097
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5100
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5103
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5108
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5113
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5118
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5121
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5124
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5127
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5130
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5133
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5138
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5140
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5145
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5148
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5151
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5156
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5159
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5162
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5166
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5167
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5170
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5173
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5178
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5181
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5186
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5188
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5189
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5192
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5195
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5200
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5205
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5208
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5212
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5213
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5216
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5221
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5224
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5229
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5234
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5236
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5237
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5240
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5243
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5246
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5251
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5261
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5266
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5284
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5288
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5291
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5295
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5298
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5301
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5306
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5309
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5312
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5315
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5318
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5324
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5352
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5362
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5366
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5374
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5378
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5384
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5390
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5396
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5398
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5406
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5412
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5418
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5422
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5428
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5437
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5442
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5447
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5453
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5455
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5461
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5465
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5470
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5473
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5477
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5483
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5490
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5494
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5498
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5504
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5508
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5513
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5519
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5524
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5530
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5540
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5542
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5559
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5567
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5572
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5578
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5585
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5591
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5596
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5600
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5603
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5606
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5611
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5621
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5626
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5632
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5637
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5640
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5643
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5649
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5656
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5661
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5675
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5694
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5705
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5722
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5726
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5733
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5740
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5742
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5744
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5750
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5755
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5770
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5775
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5780
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5784
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5787
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5791
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5798
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5803
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5807
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5813
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5819
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5826
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5830
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5832
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5836
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5842
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5849
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5856
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5860
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5866
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5870
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5880
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5884
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5886
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5894
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5899
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5904
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5912
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5919
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5923
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5927
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5931
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5936
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5945
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5949
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5957
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5963
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5965
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5970
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5979
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5984
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5989
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5993
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 5999
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6007
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6011
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6014
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6018
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6030
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6034
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6040
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6046
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6051
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6057
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6059
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6064
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6070
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6084
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6103
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6112
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6118
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6125
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6130
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6135
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6139
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6145
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6148
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6153
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6159
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6166
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6171
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6177
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6182
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6187
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6191
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6194
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6199
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6203
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6209
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6213
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6220
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6226
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6231
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6235
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6237
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6243
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6248
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6255
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6260
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6264
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6272
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6276
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6284
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6288
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6292
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6298
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6304
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6311
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6316
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6322
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6326
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6330
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6337
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6341
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6345
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6351
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6355
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6362
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6368
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6372
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6376
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6382
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6386
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6394
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6401
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6405
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6417
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6423
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6430
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6437
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6440
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6446
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6453
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6458
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6465
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6467
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6473
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6477
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6491
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6510
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6520
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6525
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6530
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6536
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6541
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6548
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6550
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6553
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6560
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6565
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6570
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6575
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6579
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6582
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6588
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6594
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6598
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6602
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6607
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6609
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6613
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6621
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6626
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6631
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6636
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6640
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6644
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6648
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6653
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6658
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6663
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6668
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6674
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6679
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6685
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6689
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6692
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6700
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6706
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6714
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6718
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6722
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6726
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6733
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6737
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6742
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6748
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6752
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6757
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6761
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6767
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6774
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6778
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6782
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6785
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6790
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6800
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6805
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6810
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6815
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6821
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6825
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6828
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6835
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6845
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6851
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6857
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6861
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6865
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6872
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6874
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6888
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6909
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6921
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6926
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6932
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6937
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6941
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6949
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6954
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6959
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6965
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6969
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6976
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6978
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6985
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6989
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 6997
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7001
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7007
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7013
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7015
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7019
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7025
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7031
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7036
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7041
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7046
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7051
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7057
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7059
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7065
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7073
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7078
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7082
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7086
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7092
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7098
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7102
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7107
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7109
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7117
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7123
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7129
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7134
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7140
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7144
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7154
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7158
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7162
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7166
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7171
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7175
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7182
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7196
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7204
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7209
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7213
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7215
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7220
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7225
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7229
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7237
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7242
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7246
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7252
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7256
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7260
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7264
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7271
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7275
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7283
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7287
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7291
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7298
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7312
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7330
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7336
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7342
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7358
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7360
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7364
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7370
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7377
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7383
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7389
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7396
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7400
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7402
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7409
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7414
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7419
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7424
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7431
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7433
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7440
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7444
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7447
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7452
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7456
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7461
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7466
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7471
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7477
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7484
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7488
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7490
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7497
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7503
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7508
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7512
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7518
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7524
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7529
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7535
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7541
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7545
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7553
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7561
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7568
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7575
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7577
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7583
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7587
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7589
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7595
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7601
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7605
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7611
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7621
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7627
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7633
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7635
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7641
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7649
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7655
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7662
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7668
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7672
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7678
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7680
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7683
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7688
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7693
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7699
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7704
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7709
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7723
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7738
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7754
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7760
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7763
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7768
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7772
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7779
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7786
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7790
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7794
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7801
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7807
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7811
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7815
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7820
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7825
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7830
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7836
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7841
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7846
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7851
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7855
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7858
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7863
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7868
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7875
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7879
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7885
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7894
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7896
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7902
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7904
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7910
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7915
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7920
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7925
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7931
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7937
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7941
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7947
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7951
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7954
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7960
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7967
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7971
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7977
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7983
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7988
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7993
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7997
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 7999
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8006
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8014
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8019
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8025
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8029
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8034
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8038
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8042
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8048
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8053
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8062
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8067
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8072
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8077
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8081
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8085
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8089
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8096
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8101
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8105
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8110
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8123
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8131
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8150
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8156
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8162
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8165
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8171
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8178
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8184
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8189
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8194
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8201
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8209
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8215
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8218
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8224
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8229
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8233
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8239
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8247
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8251
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8257
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8261
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8264
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8269
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8277
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8283
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8288
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8294
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8301
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8303
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8306
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8310
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8316
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8321
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8326
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8332
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8338
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8342
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8346
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8350
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8358
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8362
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8370
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8374
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8381
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8386
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8394
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8398
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8403
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8409
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8413
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8420
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8424
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8433
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8436
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8440
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8445
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8450
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8456
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8466
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8472
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8476
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8483
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8487
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8495
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8501
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8506
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8510
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8562
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8572
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8591
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8598
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8602
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8606
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8608
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8616
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8622
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8627
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8630
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8633
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8639
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8643
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8650
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8656
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8660
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8662
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8668
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8673
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8678
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8684
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8688
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8694
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8700
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8706
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8708
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8712
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8720
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8726
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8730
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8734
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8746
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8750
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8752
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8758
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8764
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8770
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8774
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8780
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8784
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8791
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8797
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8799
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8805
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8811
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8819
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8824
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8830
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8835
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8839
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8845
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8849
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8862
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8868
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8874
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8879
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8882
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8887
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8891
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8898
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8902
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8904
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8911
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8916
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8921
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8927
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8932
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8938
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8944
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8948
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8950
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8956
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8964
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8968
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8973
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 8986
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9008
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9015
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9027
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9036
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9040
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9043
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9047
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9051
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9060
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9064
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9070
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9075
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9080
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9086
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9090
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9093
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9099
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9104
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9109
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9114
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9119
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9123
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9128
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9134
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9138
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9143
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9146
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9150
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9156
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9160
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9168
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9173
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9177
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9180
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9184
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9188
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9194
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9200
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9205
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9212
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9217
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9222
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9226
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9229
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9235
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9239
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9246
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9250
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9257
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9266
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9270
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9273
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9278
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9283
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9289
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9295
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9299
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9303
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9309
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9315
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9318
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9323
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9329
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9333
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9340
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9345
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9349
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9355
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9361
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9364
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9369
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9375
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9380
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9384
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9391
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9396
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9401
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9414
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9424
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9428
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9447
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9454
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9465
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9468
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9473
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9478
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9482
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9489
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9493
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9496
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9502
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9511
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9516
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9523
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9527
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9533
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9539
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9542
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9547
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9553
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9558
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9563
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9569
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9574
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9579
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9583
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9586
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9591
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9596
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9601
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9608
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9613
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9618
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9623
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9628
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9632
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9635
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9639
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9643
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9650
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9655
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9664
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9669
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9673
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9676
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9680
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9687
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9694
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9700
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9706
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9711
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9715
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9721
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9724
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9729
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9733
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9738
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9743
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9749
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9754
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9758
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9762
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9765
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9770
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9774
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9781
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9786
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9791
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9796
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9807
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9814
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9833
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9840
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9844
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9847
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9852
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9857
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9862
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9866
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9872
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9878
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9884
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9888
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9894
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9899
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9903
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9909
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9914
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9919
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9925
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9930
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9935
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9939
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9942
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9947
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9953
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9959
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9963
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9970
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9975
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9980
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9984
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9987
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 9993
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10000
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10005
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10010
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10015
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10020
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10025
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10029
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10032
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10037
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10043
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10048
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10052
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10057
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10062
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10067
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10071
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10074
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10078
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10087
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10092
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10098
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10103
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10109
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10113
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10120
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10122
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10127
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10136
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10140
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10145
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10150
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10155
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10160
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10164
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10166
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10172
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10179
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10182
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10189
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10194
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10205
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10223
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10234
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10244
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10246
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10257
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10262
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10267
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10276
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10281
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10285
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10288
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10292
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10299
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10305
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10311
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10317
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10324
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10328
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10332
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10338
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10340
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10347
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10351
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10359
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10363
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10371
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10375
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10384
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10386
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10390
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10397
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10401
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10409
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10413
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10420
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10424
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10431
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10435
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10438
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10440
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10445
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10451
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10457
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10462
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10478
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10483
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10487
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10491
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10498
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10501
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10505
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10510
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10515
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10520
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10524
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10530
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10533
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10537
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10544
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10548
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10553
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10557
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10562
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10567
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10571
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10577
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10580
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10585
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10590
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10591
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10595
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10602
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10613
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10631
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10641
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10648
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10653
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10657
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10660
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10664
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10671
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10677
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10682
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10689
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10692
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10701
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10703
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10708
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10712
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10716
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10722
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10728
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10732
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10740
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10745
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10749
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10752
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10759
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10762
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10767
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10772
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10777
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10781
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10786
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10796
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10799
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10804
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10810
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10814
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10820
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10827
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10832
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10836
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10840
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10842
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10848
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10853
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10862
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10865
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10870
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10879
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10881
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10884
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10889
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10894
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10899
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10911
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10916
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10924
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10930
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10932
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10939
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10944
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10948
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10956
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10961
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10968
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10973
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10978
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10980
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10984
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10989
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 10994
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11000
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11014
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11035
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11045
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11061
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11067
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11072
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11076
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11079
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11084
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11089
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11095
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11101
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11107
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11113
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11119
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11123
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11127
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11132
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11138
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11142
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11146
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11152
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11157
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11163
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11167
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11169
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11174
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11180
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11184
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11191
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11195
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11202
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11204
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11210
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11214
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11217
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11222
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11227
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11232
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11237
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11241
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11247
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11253
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11257
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11260
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11264
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11271
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11277
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11281
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11288
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11292
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11298
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11302
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11305
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11310
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11316
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11323
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11325
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11331
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11337
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11349
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11357
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11361
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11363
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11369
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11376
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11383
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11389
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11394
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11399
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11404
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11408
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11417
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11421
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11437
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11462
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11469
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11474
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11479
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11484
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11489
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11493
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11496
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11504
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11511
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11518
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11523
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11528
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11533
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11537
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11540
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11546
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11554
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11562
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11567
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11572
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11579
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11582
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11586
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11590
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11596
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11603
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11607
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11613
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11618
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11624
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11629
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11633
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11635
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11645
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11650
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11656
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11663
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11670
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11674
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11676
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11683
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11688
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11695
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11700
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11705
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11709
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11716
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11720
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11723
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11727
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11737
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11743
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11749
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11755
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11762
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11766
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11770
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11776
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11781
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11785
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11791
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11797
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11804
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11808
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11813
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11819
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11829
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11834
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11854
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11867
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11874
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11878
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11889
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11893
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11899
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11905
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11911
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11915
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11920
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11924
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11930
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11936
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11943
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11948
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11952
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11958
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11964
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11966
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11972
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11978
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11988
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 11994
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12000
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12009
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12013
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12016
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12021
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12026
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12031
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12037
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12041
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12047
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12053
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12060
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12064
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12066
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12072
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12078
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12088
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12094
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12100
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12106
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12108
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12114
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12122
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12126
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12132
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12138
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12144
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12151
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12155
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12157
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12163
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12171
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12175
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12185
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12191
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12197
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12203
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12205
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12211
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12218
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12223
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12227
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12234
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12245
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12274
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12280
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12286
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12289
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12293
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12299
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12305
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12311
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12319
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12325
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12331
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12337
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12340
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12344
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12349
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12353
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12359
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12365
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12372
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12376
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12379
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12383
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12391
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12399
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12405
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12417
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12423
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12425
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12431
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12439
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12443
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12451
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12457
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12461
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12468
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12472
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12475
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12481
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12487
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12492
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12499
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12505
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12511
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12516
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12520
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12523
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12537
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12545
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12551
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12557
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12563
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12569
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12575
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12579
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12583
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12588
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12593
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12598
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12603
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12606
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12609
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12613
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12620
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12624
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12628
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12630
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12636
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12641
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12654
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12670
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12680
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12687
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12693
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12698
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12703
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12707
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12710
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12714
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12722
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12728
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12735
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12740
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12745
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12751
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12755
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12757
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12763
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12767
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12774
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12780
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12784
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12790
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12798
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12802
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12805
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12809
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12815
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12820
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12827
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12831
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12837
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12843
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12851
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12853
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12859
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12871
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12876
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12882
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12888
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12892
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12898
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12903
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12905
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12914
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12918
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12926
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12931
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12937
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12942
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12946
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12949
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12955
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12961
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12965
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12976
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12980
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12985
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12989
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12991
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 12998
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13002
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13008
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13016
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13021
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13026
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13031
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13035
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13041
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13047
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13061
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13080
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13090
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13105
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13109
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13118
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13123
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13125
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13131
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13136
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13142
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13147
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13152
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13157
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13161
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13166
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13170
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13172
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13177
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13183
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13188
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13193
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13195
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13203
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13209
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13213
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13216
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13225
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13228
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13234
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13240
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13244
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13250
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13256
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13260
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13263
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13265
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13273
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13277
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13290
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13294
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13298
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13306
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13310
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13314
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13321
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13326
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13331
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13337
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13343
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13349
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13353
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13357
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13360
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13366
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13371
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13376
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13382
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13387
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13392
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13398
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13402
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13405
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13416
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13422
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13428
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13432
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13437
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13443
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13447
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13450
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13455
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13468
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13490
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13492
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13499
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13504
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13509
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13515
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13520
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13524
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13527
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13535
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13541
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13546
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13551
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13557
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13563
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13569
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13573
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13576
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13582
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13588
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13593
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13598
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13602
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13606
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13613
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13620
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13624
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13627
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13632
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13635
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13638
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13641
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13644
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13648
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13651
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13654
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13657
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13660
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13663
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13667
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13670
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13674
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13676
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13679
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13682
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13685
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13688
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13691
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13695
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13697
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13700
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13703
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13706
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13709
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13712
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13715
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13718
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13721
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13726
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13730
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13733
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13736
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13742
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13745
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13748
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13751
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13754
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13758
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13761
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13763
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13772
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13787
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13792
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13796
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13799
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13803
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13806
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13808
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13813
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13816
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13819
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13822
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13825
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13828
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13831
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13835
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13840
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13843
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13846
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13849
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13852
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13856
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13859
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13861
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13866
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13869
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13872
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13874
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13877
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13880
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13884
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13887
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13890
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13894
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13897
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13900
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13902
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13907
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13910
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13914
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13917
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13920
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13924
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13927
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13930
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13943
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13946
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13949
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13954
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13957
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13961
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13964
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13967
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13970
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13974
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13978
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13982
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13986
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13990
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13993
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 13997
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14000
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14003
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14006
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14008
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14011
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14015
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14018
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14021
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14024
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14034
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14045
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14050
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14054
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14058
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14061
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14064
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14067
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14071
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14074
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14077
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14081
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14084
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14086
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14090
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14093
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14097
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14100
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14103
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14105
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14109
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14112
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14114
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14117
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14120
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14126
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14129
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14132
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14135
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14138
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14140
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14144
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14147
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14150
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14153
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14156
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14161
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14164
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14167
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14170
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14173
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14176
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14181
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14187
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14191
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14194
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14197
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14200
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14203
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14206
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14214
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14223
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14226
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14230
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14233
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14236
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14238
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14241
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14245
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14247
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14251
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14253
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14257
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14260
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14263
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14266
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14269
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14272
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14276
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14279
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14283
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14286
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14289
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14299
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14312
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14314
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14317
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14319
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14322
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14325
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14328
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14332
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14336
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14340
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14344
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14348
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14351
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14354
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14358
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14362
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14366
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14369
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14372
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14376
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14379
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14382
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14384
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14387
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14391
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14394
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14396
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14400
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14404
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14407
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14410
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14413
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14416
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14420
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14422
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14425
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14429
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14431
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14434
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14436
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14442
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14446
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14450
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14453
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14456
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14460
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14464
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14466
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14470
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14472
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14475
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14478
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14481
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14484
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14487
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14490
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14493
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14499
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14501
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14504
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14507
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14510
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14513
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14517
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14519
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14522
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14525
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14531
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14534
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14538
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14546
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14561
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14566
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14580
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14583
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14586
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14590
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14593
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14596
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14599
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14602
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14605
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14609
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14612
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14615
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14617
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14620
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14623
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14626
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14629
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14633
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14636
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14639
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14642
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14645
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14649
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14653
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14658
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14661
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14664
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14667
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14669
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14673
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14676
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14679
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14683
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14686
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14689
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14692
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14695
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14698
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14702
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14705
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14708
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14712
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14716
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14718
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14721
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14724
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14727
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14730
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14733
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14736
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14739
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14744
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14747
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14751
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14754
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14756
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14760
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14762
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14765
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14768
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14771
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14774
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14778
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14781
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14784
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14787
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14790
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14793
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14796
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14805
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14821
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14826
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14830
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14832
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14835
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14838
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14841
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14845
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14848
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14851
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14856
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14859
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14862
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14865
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14868
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14871
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14874
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14878
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14881
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14884
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14886
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14889
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14892
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14894
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14897
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14900
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14903
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14906
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14910
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14914
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14918
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14920
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14923
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14926
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14929
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14932
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14936
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14940
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14944
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14948
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14951
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14954
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14957
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14961
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14964
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14967
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14972
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14975
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14979
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14982
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14985
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14988
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14991
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14995
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 14998
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15001
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15005
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15008
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15011
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15014
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15016
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15019
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15023
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15026
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15029
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15032
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15036
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15038
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15040
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15044
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15046
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15049
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15058
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15073
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15078
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15083
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15087
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15091
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15094
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15096
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15101
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15103
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15107
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15111
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15115
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15118
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15122
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15124
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15128
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15132
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15135
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15138
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15142
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15146
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15150
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15154
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15157
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15160
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15163
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15166
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15169
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15172
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15175
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15179
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15182
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15185
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15189
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15192
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15196
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15200
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15204
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15208
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15211
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15214
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15216
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15220
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15224
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15228
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15232
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15235
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15238
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15241
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15244
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15247
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15251
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15255
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15259
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15262
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15266
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15271
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15275
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15277
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15281
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15283
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15287
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15293
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15297
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15299
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15303
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15306
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15309
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15311
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15314
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15347
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15352
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15363
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15366
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15369
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15373
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15376
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15380
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15383
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15386
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15389
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15392
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15396
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15399
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15402
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15405
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15408
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15414
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15417
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15421
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15424
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15426
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15431
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15434
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15437
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15440
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15443
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15446
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15449
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15452
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 15455
        },
        {
          "note": "91d880890f6e481edcbe.exe tried to sleep 568.626 seconds, actually delayed analysis time by 0.0 seconds"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "encrypted_ioc",
      "description": "At least one IP Address, Domain, or File Name was found in a crypto call",
      "categories": [
        "encryption"
      ],
      "severity": 2,
      "weight": 0,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 1259
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1260
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1261
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1262
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1263
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1264
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1265
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1270
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1271
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1272
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1273
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1274
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1275
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1280
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1281
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1282
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1283
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1284
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1285
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1290
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1291
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1292
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1293
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1294
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1295
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1300
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1301
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1302
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1303
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1304
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1305
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1310
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1311
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1312
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1313
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1314
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1315
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1320
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1321
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1322
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1323
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1324
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1325
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1330
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1331
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1332
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1333
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1334
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1335
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1340
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1341
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1342
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1343
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1344
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1345
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1346
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1351
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1352
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1353
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1354
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1355
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1356
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1361
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1362
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1363
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1364
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1365
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1366
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1371
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1372
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1373
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1374
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1375
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1376
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1381
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1382
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1383
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1384
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1385
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1386
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1391
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1392
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1393
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1394
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1395
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1396
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1401
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1402
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1403
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1404
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1405
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1406
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1412
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1413
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1414
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1415
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1416
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1532
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1536
        },
        {
          "ioc": "x00.text"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "reads_self",
      "description": "Reads data out of its own binary image",
      "categories": [
        "generic"
      ],
      "severity": 2,
      "weight": 1,
      "confidence": 30,
      "references": [],
      "data": [
        {
          "self_read": "process: 91d880890f6e481edcbe.exe, pid: 6484, offset: 0x3030785c3030785c, length: 0x00001000"
        },
        {
          "self_read": "process: 91d880890f6e481edcbe.exe, pid: 6484, offset: 0x3030785c3038785c, length: 0x00000200"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "network_cnc_http",
      "description": "HTTP traffic contains suspicious features which may be indicative of malware related traffic",
      "categories": [
        "network",
        "c2"
      ],
      "severity": 2,
      "weight": 1,
      "confidence": 30,
      "references": [],
      "data": [
        {
          "ip_hostname": "HTTP connection was made to an IP address rather than domain name"
        },
        {
          "suspicious_request": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee/pieceshash?cacheHostOrigin=msedge.f.dl.delivery.mp.microsoft.com"
        },
        {
          "suspicious_request": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "network_http",
      "description": "Performs some HTTP requests",
      "categories": [
        "network"
      ],
      "severity": 2,
      "weight": 1,
      "confidence": 30,
      "references": [],
      "data": [
        {
          "url": "http://i.pki.goog/gsr1.crt"
        },
        {
          "url": "http://i.pki.goog/r4.crt"
        },
        {
          "url": "http://i.pki.goog/we2.crt"
        },
        {
          "url": "http://i.pki.goog/gsr4.crt"
        },
        {
          "url": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee/pieceshash?cacheHostOrigin=msedge.f.dl.delivery.mp.microsoft.com"
        },
        {
          "url": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "packer_entropy",
      "description": "The binary likely contains encrypted or compressed data",
      "categories": [
        "packer"
      ],
      "severity": 2,
      "weight": 1,
      "confidence": 100,
      "references": [
        "http://www.forensickb.com/2013/03/file-entropy-explained.html",
        "http://virii.es/U/Using%20Entropy%20Analysis%20to%20Find%20Encrypted%20and%20Packed%20Malware.pdf"
      ],
      "data": [
        {
          "section": {
            "name": ".rsrc",
            "raw_address": "0x0001cc00",
            "virtual_address": "0x00022000",
            "virtual_size": "0x00015dcc",
            "size_of_data": "0x00015e00",
            "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
            "characteristics_raw": "0x40000040",
            "entropy": "8.00"
          }
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "injection_rwx",
      "description": "Creates RWX memory",
      "categories": [
        "injection"
      ],
      "severity": 2,
      "weight": 1,
      "confidence": 50,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 238
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "persistence_autorun",
      "description": "Installs itself for autorun at Windows startup",
      "categories": [
        "persistence"
      ],
      "severity": 3,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 1760
        },
        {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run\\NAT Subsystem"
        },
        {
          "data": "C:\\Program Files (x86)\\NAT Subsystem\\natss.exe"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "rat_nanocore",
      "description": "Exhibits behavior characteristic of Nanocore RAT",
      "categories": [
        "rat"
      ],
      "severity": 3,
      "weight": 4,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "type": "call",
          "pid": 6484,
          "cid": 1259
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1270
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1280
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1290
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1300
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1310
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1320
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1330
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1340
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1351
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1361
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1371
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1381
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1391
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1401
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1411
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1532
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1536
        }
      ],
      "new_data": [],
      "alert": false,
      "families": [
        "NanoCore"
      ]
    },
    {
      "name": "binary_yara",
      "description": "Binary file triggered multiple YARA rules",
      "categories": [
        "static"
      ],
      "severity": 3,
      "weight": 1,
      "confidence": 80,
      "references": [],
      "data": [
        {
          "Binary triggered YARA rule": "DITEKSHEN_MALWARE_Win_Nanocore"
        },
        {
          "Binary triggered YARA rule": "Windows_Trojan_Nanocore_d8c4e3c5"
        },
        {
          "Binary triggered YARA rule": "Nanocore"
        },
        {
          "Binary triggered YARA rule": "Nanocore_RAT_Gen_2"
        },
        {
          "Binary triggered YARA rule": "NanoCore"
        },
        {
          "Binary triggered YARA rule": "NETexecutableMicrosoft"
        },
        {
          "Binary triggered YARA rule": "IsPE32"
        },
        {
          "Binary triggered YARA rule": "IsNET_EXE"
        },
        {
          "Binary triggered YARA rule": "IsWindowsGUI"
        },
        {
          "Binary triggered YARA rule": "IsPacked"
        },
        {
          "Binary triggered YARA rule": "Microsoft_Visual_Studio_NET"
        },
        {
          "Binary triggered YARA rule": "Microsoft_Visual_C_v70_Basic_NET_additional"
        },
        {
          "Binary triggered YARA rule": "Microsoft_Visual_C_Basic_NET"
        },
        {
          "Binary triggered YARA rule": "Microsoft_Visual_Studio_NET_additional"
        },
        {
          "Binary triggered YARA rule": "Microsoft_Visual_C_v70_Basic_NET"
        },
        {
          "Binary triggered YARA rule": "NET_executable_"
        },
        {
          "Binary triggered YARA rule": "NET_executable"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "network_questionable_http_path",
      "description": "Makes a suspicious HTTP request to a commonly exploitable directory with questionable file ext",
      "categories": [
        "network"
      ],
      "severity": 3,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "url": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee/pieceshash?cacheHostOrigin=msedge.f.dl.delivery.mp.microsoft.com"
        },
        {
          "url": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com"
        },
        {
          "url": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com"
        },
        {
          "url": "http://46.149.110.67/filestreamingservice/files/c92e95cf-27b9-4ea9-a961-5f08d3174bee?P1=1777715798&P2=404&P3=2&P4=lPKE0H2kvNLZaX%2baQZIlsIf4V71n3W%2fU7ukwQMf%2fbNBOu6Z2zjLPHkqlHsI92jczzHIL4FQHp8lNNQI27vV4UQ%3d%3d&cacheHostOrigin=msedge.b.tlu.dl.delivery.mp.microsoft.com"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "procmem_yara",
      "description": "Yara detections observed in process dumps, payloads or dropped files",
      "categories": [
        "malware"
      ],
      "severity": 3,
      "weight": 4,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsPE32' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsWindowsGUI' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsPacked' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'DITEKSHEN_MALWARE_Win_Nanocore' with data '['NanoCore.ClientPlugin', 'NanoCore.ClientPluginHost', 'IClientApp', 'IClientData', 'IClientNetwork', 'IClientAppHost', 'IClientDataHost', 'IClientLoggingHost', 'IClientNetworkHost', 'IClientUIHost', 'IClientNameObjectCollection', 'IClientReadOnlyNameObjectCollection', 'ClientPlugin', 'get_ClientSettings', 'get_Connected']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Windows_Trojan_Nanocore_d8c4e3c5' with data '['NanoCore.ClientPluginHost', 'NanoCore.ClientPlugin', 'get_BuilderSettings', 'IClientAppHost', 'AddHostEntry', 'LogClientException', 'PipeExists', 'IClientLoggingHost']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Nanocore_RAT_Gen_2' with data '['NanoCore.ClientPluginHost', 'IClientNetworkHost']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'NETDLLMicrosoft' with data '['{ 00 00 00 00 00 00 00 00 5F 43 6F 72 44 6C 6C 4D 61 69 6E 00 6D 73 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsPE32' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsNET_DLL' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsDLL' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsWindowsGUI' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_Studio_NET' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_C_v70_Basic_NET_additional' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_C_Basic_NET' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_Studio_NET_additional' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_C_v70_Basic_NET' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'NET_executable_' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'NET_executable' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'NETDLLMicrosoft' with data '['{ 00 00 00 00 00 00 00 00 5F 43 6F 72 44 6C 6C 4D 61 69 6E 00 6D 73 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsPE32' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsNET_DLL' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsDLL' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsConsole' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_Studio_NET' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_C_v70_Basic_NET_additional' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_C_Basic_NET' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_Studio_NET_additional' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Microsoft_Visual_C_v70_Basic_NET' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'NET_executable_' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'NET_executable' with data '['{ FF 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'DITEKSHEN_MALWARE_Win_Nanocore' with data '['NanoCore.ClientPlugin', 'NanoCore.ClientPluginHost', 'IClientData', 'IClientNetwork', 'IClientDataHost', 'IClientLoggingHost', 'IClientNetworkHost', 'IClientUIHost', 'IClientNameObjectCollection', 'IClientReadOnlyNameObjectCollection', 'ClientPlugin', 'get_ClientSettings']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Windows_Trojan_Nanocore_d8c4e3c5' with data '['NanoCore.ClientPluginHost', 'NanoCore.ClientPlugin', 'get_BuilderSettings', 'LogClientException', 'IClientLoggingHost']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'Nanocore_RAT_Gen_2' with data '['NanoCore.ClientPluginHost', 'IClientNetworkHost']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'NETDLLMicrosoft' with data '['{ 00 00 00 00 00 00 00 00 5F 43 6F 72 44 6C 6C 4D 61 69 6E 00 6D 73 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 }']'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsPE32' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsNET_DLL' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsDLL' with data '[]'"
        },
        {
          "Hit": "PID 6484 triggered the Yara rule 'IsConsole' with data '[]'"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "recon_fingerprint",
      "description": "Collects information to fingerprint the system",
      "categories": [
        "discovery"
      ],
      "severity": 3,
      "weight": 1,
      "confidence": 75,
      "references": [],
      "data": [
        {
          "regkey": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid"
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    },
    {
      "name": "removes_zoneid_ads",
      "description": "Attempts to remove evidence of file being downloaded from the Internet",
      "categories": [
        "generic"
      ],
      "severity": 3,
      "weight": 1,
      "confidence": 100,
      "references": [],
      "data": [
        {
          "file": "C:\\Users\\cape\\AppData\\Local\\Temp\\91d880890f6e481edcbe.exe:Zone.Identifier"
        },
        {
          "type": "call",
          "pid": 6484,
          "cid": 1952
        }
      ],
      "new_data": [],
      "alert": false,
      "families": []
    }
  ],
  "malscore": 10.0,
  "ttps": [
    {
      "signature": "antisandbox_sleep",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OB0001",
        "B0007",
        "B0007.008"
      ]
    },
    {
      "signature": "antivm_checks_available_memory",
      "ttps": [
        "T1082"
      ],
      "mbcs": [
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "dead_connect",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "encrypted_ioc",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "persistence_autorun",
      "ttps": [
        "T1547.001",
        "T1112",
        "T1547"
      ],
      "mbcs": [
        "OB0012",
        "E1112",
        "F0012"
      ]
    },
    {
      "signature": "rat_nanocore",
      "ttps": [
        "T1219"
      ],
      "mbcs": [
        "B0022",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0005",
        "C0027",
        "OC0001",
        "C0016",
        "OC0003",
        "C0042"
      ]
    },
    {
      "signature": "reads_self",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OC0001",
        "C0051"
      ]
    },
    {
      "signature": "binary_yara",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "network_cnc_http",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OB0004",
        "B0033",
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "network_http",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "network_questionable_http_path",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "packer_entropy",
      "ttps": [
        "T1027.002",
        "T1027"
      ],
      "mbcs": [
        "OB0001",
        "OB0002",
        "OB0006",
        "F0001"
      ]
    },
    {
      "signature": "procmem_yara",
      "ttps": [
        "T1071"
      ],
      "mbcs": [
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002",
        "OC0006",
        "C0002"
      ]
    },
    {
      "signature": "recon_fingerprint",
      "ttps": [
        "T1012",
        "T1082"
      ],
      "mbcs": [
        "OB0007",
        "E1082",
        "OC0008",
        "C0036"
      ]
    }
  ],
  "malstatus": "Malicious"
}